Attention, phishing mail: "iTunes Store Family Membership 2018" wants to access your Apple login and password

I just got an email from "Apple-account@applepurchase.com", which was shown as proof of a purchase in the iTunes Store. I was about to print it out for my accounting department when I took another closer look at the product. It said "iTunes Store Family Membership 2018" and I was wondering what I have to do with a "Family Membership" since I haven't set up a family share. So I got a bit skeptical ...

This phishing email pretends to be an email from Apple. At first glance, it looks very convincing. You can only tell from the little things that bad people want to grab your iCloud data.

This phishing email pretends to be an email from Apple. At first glance, it looks very convincing. You can only tell from the little things that bad people want to grab your iCloud data.

My tests also "authenticity"

To see if the mail actually came from Apple, I took a closer look at the "Cancel Purchase" link. If you go over it with the mouse pointer, a small window opens with the URL that is linked behind it. And it didn't look like Apple at all: x.co something is not a trustworthy domain for me. ;-)

The second test is the sender address, which you take a closer look at: To do this, move the mouse over the sender email address and click on it. A window then opens in which the "actual" email address is then listed. And it no longer has anything to do with "applepurchase.com".

You can see the real sender address when you click on the email address.

You can see the real sender address when you click on the email address.

Conclusion: Phishing mail detected, danger averted ...

The mail looked really very real. I was only surprised at the English version, since Apple usually writes in German. In the end, however, I was only puzzled by the listed product that was billed.

I can't say what exactly happens when you click on the links in the mail. I failed to do this for security reasons. Usually a window opens with a fake iCloud login in which you should then enter your access data. When the bad guys have these, most of the time they go to the app store and buy totally overpriced apps and in-app purchases from themselves to make money.

So be careful when you get such emails. I rarely warn against such emails in an extra post, but it is appropriate here because the email looks really damn real.

 

-
Do you like my blog? Then I would be happy to receive a short review on Google. Easy leave something here for a moment - that would be great, thank you!

1 comment

  1. Lynne-Marie says:

    Thanks for the info!
    These emails always look more real. In the past you could sort things out better (based on bad language and recognizable sender). Now the happy childhood on the Internet is over. Too bad.

Leave a Comment

Your e-mail address will not be published. Required fields are marked with * .