2/11/09

Fake MobileMe email / phishing threat

 Ars.Technica recently posted an article about a new phishing scam that actually sounds like it has a chance of bamboozling many users: Bogus emails, purporting to be from Apple, which prompt you to update your .Mac / MobileMe account information:

“As usual, the e-mail is disguised to look like a legit message coming from Apple, but clicking on the provided link (so that users can "update" their billing information with a working credit card, of course) forwards them to a site that is not at all affiliated with Apple.”

Phishing, if you didn’t know, is something you’re not generally protected against just because you use a Mac. (unless the phish attempt has to do with installing malware or viruses which don’t run on Macs). Threats are platform-independent. In this particular case, there’s no virus or malware. Instead, it’s good old fashioned trickery and forgery, using “social engineering” to get you to make a mistake and turn over information you shouldn’t to somebody you don’t want to know.

No comments: