I4C warns of phishing scam targeting iPhone users via fake Apple support messages

A sophisticated phishing campaign impersonating Apple tech support is targeting iPhone users whose devices have been lost or stolen, aiming to steal Apple ID credentials and One-Time Passwords.

The National Cybercrime Threat Analytics Unit of the Indian Cybercrime Coordination Centre (I4C) has warned of a sophisticated phishing campaign impersonating Apple tech support to target iPhone users whose devices have been lost or stolen, officials said on Saturday.

The I4C, which functions under the Union Home Ministry, said fraudsters posing as Apple Support are sending deceptive messages containing phishing links to exploit the victims' urgency to locate or secure their missing device.

''These messages closely resemble legitimate 'Find My iPhone' or Apple Support notifications and redirect users to counterfeit Apple login pages designed to steal Apple ID credentials and One-Time Passwords (OTP),'' the advisory said.

Once compromised, attackers gain unauthorised access to the victims' accounts and remove the linked Apple ID from their stolen device, it said.

''Avoid clicking links received via SMS (especially from international SMS Headers) or unsolicited messages and carefully check the URL before entering credentials,'' the I4C said.

It urged the users to only rely on Apple's official ''Find Devices'' service page for such recovery.