Print Page - Apple ID Email

Welcome to Techsurvivors => Tech => Topic started by: Jack W on November 29, 2013, 06:37:22 AM

Title: Apple ID Email
Post by: Jack W on November 29, 2013, 06:37:22 AM

I received this email a couple of days ago:

[attachment=2936:Apple_Email.jpg]

t's been a couple of months since I messed up my login.

I shelved it, and then this came out of the blue.

Is it legit?

The part that was weird was the "don't worry . . . "

Jack

Title: Apple ID Email
Post by: Paddy on November 29, 2013, 08:25:11 AM

QUOTE(Jack W @ Nov 29 2013, 07:37 AM) <{POST_SNAPBACK}>

That's normal, not weird. And you should check the raw headers to be sure that the email is from Apple. (the "from" addresses should all be legit, not ending in .cn or .ru!)

Most likely, it's someone who mistyped their own ID and password and then got the usual offer to reset it. If you keep getting these messages, then it's more likely that someone is trying to break into your account. See: https://discussions.apple.com/message/23913214#23913214

Title: Apple ID Email
Post by: Xairbusdriver on November 29, 2013, 08:38:55 AM

First, you can simply go directly to the Apple site to do all that. no need to click any links in an eMail. Which is a good rule to follow, anyway.

Second, unless you specifically enabled the images for this one message, you must have "Show html" enabled in your browser. If so, any images sent (like the Apple logo) were sent when you opened the message. That actually sent a message back to the server that the contained/stored the image(s) and recorded your request. That info now includes your address and that you will open messages with images included. While not usually a threat to Macs, that is a known vector for malware for Window computers. Why have a 'door' open?

Third, you can always see what a link 'points' to by hovering your cursor over it. If the first part of that one doesn't say "https://apple.iforgot.com.cgi-bin/resetPassword.cgi?..." it's fake. That "apple.com" part absolutely must be just after the "://" part. Anything else could just be the SCAMers server, even if it actually had "apple.com" in it somewhere else, it's still not going to Apple.

Finally, I think it probably is a valid email, here's a screen shot of one I got a few, months ago. But it's super simple to make a message look exactly like that (or yours). The trick is to hide the actual server that the links sends you to. Apple doesn't do us any favors by hiding it in the text.

[attachment=2937:Reset_Apple_ID.jpg]

Safest "reply" is always to go to the senders site, hopefully one that you have bookmarked because you know it is valid.

Title: Apple ID Email
Post by: krissel on November 30, 2013, 01:56:59 AM

Apple has used that exact form for several years. I've it received it a few times, both when I've actually attempted to change my info and messed up and then there was this one...

[attachment=2938:spanish_appleid.png]

Obviously I kept a close eye on my account after that.