Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.sys.mac.system > #101433 > unrolled thread

Fake iTunes receipt from phishers targeting Apple users

Started by"David B." <DavidB@nomail.afraid.invalid>
First post2017-02-28 15:29 +0000
Last post2017-02-28 17:38 +0000
Articles 13 — 7 participants

Back to article view | Back to comp.sys.mac.system


Contents

  Fake iTunes receipt from phishers targeting Apple users "David B." <DavidB@nomail.afraid.invalid> - 2017-02-28 15:29 +0000
    Re: Fake iTunes receipt from phishers targeting Apple users Alrescha <alrescha@gmail.com> - 2017-02-28 10:40 -0500
      Re: Fake iTunes receipt from phishers targeting Apple users "David B." <DavidB@nomail.afraid.invalid> - 2017-02-28 17:40 +0000
      Re: Fake iTunes receipt from phishers targeting Apple users Patty Winter <patty1@wintertime.com> - 2017-02-28 18:42 +0000
        Re: Fake iTunes receipt from phishers targeting Apple users nospam <nospam@nospam.invalid> - 2017-02-28 14:06 -0500
          Re: Fake iTunes receipt from phishers targeting Apple users "David B." <DavidB@nomail.afraid.invalid> - 2017-02-28 21:20 +0000
          Re: Fake iTunes receipt from phishers targeting Apple users Lewis <g.kreme@gmail.com.dontsendmecopies> - 2017-02-28 22:32 +0000
        Re: Fake iTunes receipt from phishers targeting Apple users Jolly Roger <jollyroger@pobox.com> - 2017-02-28 20:11 +0000
          Re: Fake iTunes receipt from phishers targeting Apple users Patty Winter <patty1@wintertime.com> - 2017-02-28 22:20 +0000
    Re: Fake iTunes receipt from phishers targeting Apple users Jolly Roger <jollyroger@pobox.com> - 2017-02-28 15:43 +0000
      Re: Fake iTunes receipt from phishers targeting Apple users "David B." <DavidB@nomail.afraid.invalid> - 2017-02-28 17:42 +0000
    Re: Fake iTunes receipt from phishers targeting Apple users Savageduck <savageduck1@{REMOVESPAM}me.com> - 2017-02-28 09:16 -0800
      Re: Fake iTunes receipt from phishers targeting Apple users "David B." <DavidB@nomail.afraid.invalid> - 2017-02-28 17:38 +0000

#101433 — Fake iTunes receipt from phishers targeting Apple users

From"David B." <DavidB@nomail.afraid.invalid>
Date2017-02-28 15:29 +0000
SubjectFake iTunes receipt from phishers targeting Apple users
Message-ID<8HgtA.675776$Ed5.373290@fx05.fr7>
Movie night? Nope. It's a fake iTunes receipt from phishers targeting 
Apple users

Put the popcorn away… there aren’t any movie purchases here.

David Bisson | February 26, 2017 6:08 pm

https://www.grahamcluley.com/itunes-movie-phishing/

Views/comments?

-- 
"Do something wonderful, people may imitate it." (Albert Schweitzer)

[toc] | [next] | [standalone]


#101435

FromAlrescha <alrescha@gmail.com>
Date2017-02-28 10:40 -0500
Message-ID<o945h7$vsa$1@dont-email.me>
In reply to#101433
On 2017-02-28 15:29:08 +0000, "David B." <DavidB@nomail.afraid.invalid> said:

> Movie night? Nope. It's a fake iTunes receipt from phishers targeting 
> Apple users

I have seen a fake "Your Apple ID () was used to sign into iCloud" 
email.  It was not to an address that I use for iCloud but it did make 
me pause.

A.

[toc] | [prev] | [next] | [standalone]


#101454

From"David B." <DavidB@nomail.afraid.invalid>
Date2017-02-28 17:40 +0000
Message-ID<ICitA.744827$Be.258450@fx27.fr7>
In reply to#101435
On 28/02/2017 15:40, Alrescha wrote:
> On 2017-02-28 15:29:08 +0000, "David B." <DavidB@nomail.afraid.invalid>
> said:
>
>> Movie night? Nope. It's a fake iTunes receipt from phishers targeting
>> Apple users
>
> I have seen a fake "Your Apple ID () was used to sign into iCloud"
> email.  It was not to an address that I use for iCloud but it did make
> me pause.
>
> A.

One must stay constantly aware!!!

[toc] | [prev] | [next] | [standalone]


#101465

FromPatty Winter <patty1@wintertime.com>
Date2017-02-28 18:42 +0000
Message-ID<o94gb1$5ik$1@dont-email.me>
In reply to#101435
In article <o945h7$vsa$1@dont-email.me>, Alrescha  <alrescha@gmail.com> wrote:
>
>I have seen a fake "Your Apple ID () was used to sign into iCloud" 
>email.  It was not to an address that I use for iCloud but it did make 
>me pause.

I paused recently when I got an authentication request about an
attempted login supposedly from a town 15 miles away from me. In 
fact, it happened more than once. I don't know why Apple's authentication
servers thought I was so far away from my actual location.


Patty

[toc] | [prev] | [next] | [standalone]


#101468

Fromnospam <nospam@nospam.invalid>
Date2017-02-28 14:06 -0500
Message-ID<280220171406167339%nospam@nospam.invalid>
In reply to#101465
In article <o94gb1$5ik$1@dont-email.me>, Patty Winter
<patty1@wintertime.com> wrote:
> >I have seen a fake "Your Apple ID () was used to sign into iCloud" 
> >email.  It was not to an address that I use for iCloud but it did make 
> >me pause.
> 
> I paused recently when I got an authentication request about an
> attempted login supposedly from a town 15 miles away from me. In 
> fact, it happened more than once. I don't know why Apple's authentication
> servers thought I was so far away from my actual location.

because that's where your isp geolocated to, and 15 miles is not at all
far. many people drive much, much more than that just to commute to
work.

my isp geolocates to a town 50+ miles away.

[toc] | [prev] | [next] | [standalone]


#101479

From"David B." <DavidB@nomail.afraid.invalid>
Date2017-02-28 21:20 +0000
Message-ID<9QltA.701073$Ew6.641594@fx21.fr7>
In reply to#101468
On 28/02/2017 19:06, nospam wrote:
> In article <o94gb1$5ik$1@dont-email.me>, Patty Winter
> <patty1@wintertime.com> wrote:
>>> I have seen a fake "Your Apple ID () was used to sign into iCloud"
>>> email.  It was not to an address that I use for iCloud but it did make
>>> me pause.
>>
>> I paused recently when I got an authentication request about an
>> attempted login supposedly from a town 15 miles away from me. In
>> fact, it happened more than once. I don't know why Apple's authentication
>> servers thought I was so far away from my actual location.
>
> because that's where your isp geolocated to, and 15 miles is not at all
> far. many people drive much, much more than that just to commute to
> work.
>
> my isp geolocates to a town 50+ miles away.


My iPad can tell on which SIDE of a narrow canal I'm moored. ;-)

It's accurate to within just a few FEET!

-- 
Boater extraordinaire! ;-)

[toc] | [prev] | [next] | [standalone]


#101487

FromLewis <g.kreme@gmail.com.dontsendmecopies>
Date2017-02-28 22:32 +0000
Message-ID<slrnobbunn.9dl.g.kreme@snow.local>
In reply to#101468
In message <280220171406167339%nospam@nospam.invalid> nospam <nospam@nospam.invalid> wrote:
> In article <o94gb1$5ik$1@dont-email.me>, Patty Winter
> <patty1@wintertime.com> wrote:
>> >I have seen a fake "Your Apple ID () was used to sign into iCloud" 
>> >email.  It was not to an address that I use for iCloud but it did make 
>> >me pause.
>> 
>> I paused recently when I got an authentication request about an
>> attempted login supposedly from a town 15 miles away from me. In 
>> fact, it happened more than once. I don't know why Apple's authentication
>> servers thought I was so far away from my actual location.

> because that's where your isp geolocated to, and 15 miles is not at all
> far. many people drive much, much more than that just to commute to
> work.

Hell, I drive nearly that far to get coffee.

> my isp geolocates to a town 50+ miles away.

When I first got my Comcast (business) connection in this house it
showed my location in a small town in Colorado (Craig), which is
approximately 4 hours away from Denver, where I am.

I don't know if it ever got updated because when they came out for the
5th time to fix something they replaced the modem and claimed they had
to assign me a new IP.

-- 
Adolescence is the period between childhood and adultery

[toc] | [prev] | [next] | [standalone]


#101471

FromJolly Roger <jollyroger@pobox.com>
Date2017-02-28 20:11 +0000
Message-ID<ehm3r8F76inU1@mid.individual.net>
In reply to#101465
On 2017-02-28, Patty Winter <patty1@wintertime.com> wrote:
>
> In article <o945h7$vsa$1@dont-email.me>, Alrescha  <alrescha@gmail.com> wrote:
>>
>> I have seen a fake "Your Apple ID () was used to sign into iCloud" 
>> email.  It was not to an address that I use for iCloud but it did make 
>> me pause.
>
> I paused recently when I got an authentication request about an
> attempted login supposedly from a town 15 miles away from me. In 
> fact, it happened more than once. I don't know why Apple's authentication
> servers thought I was so far away from my actual location.

Well it's not actually Apple's fault. Geolocation (figuring out where an
IP address resides physically on the map) is not an exact science.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]


#101485

FromPatty Winter <patty1@wintertime.com>
Date2017-02-28 22:20 +0000
Message-ID<o94t3r$nnt$1@dont-email.me>
In reply to#101471
In article <ehm3r8F76inU1@mid.individual.net>,
Jolly Roger  <jollyroger@pobox.com> wrote:
>On 2017-02-28, Patty Winter <patty1@wintertime.com> wrote:
>>
>> I paused recently when I got an authentication request about an
>> attempted login supposedly from a town 15 miles away from me. In 
>> fact, it happened more than once. I don't know why Apple's authentication
>> servers thought I was so far away from my actual location.
>
>Well it's not actually Apple's fault. Geolocation (figuring out where an
>IP address resides physically on the map) is not an exact science.

I know it isn't exact, but when I browse the web, I often get
information or ads targeted to my city, so THEY obviously figure 
out where my IP address is. 

I just tried a weather website I hadn't previously visited, and 
indeed it determined the correct city, although it showed me data 
for a weather station several miles away instead of one of the many 
stations that are closer to me.


Patty

[toc] | [prev] | [next] | [standalone]


#101436

FromJolly Roger <jollyroger@pobox.com>
Date2017-02-28 15:43 +0000
Message-ID<ehlk5fF40s9U2@mid.individual.net>
In reply to#101433
David B. <DavidB@nomail.afraid.invalid> wrote:
> Movie night? Nope. It's a fake iTunes receipt from phishers targeting 
> Apple users
> 
> Put the popcorn away… there aren’t any movie purchases here.
> 
> David Bisson | February 26, 2017 6:08 pm
> 
> https://www.grahamcluley.com/itunes-movie-phishing/
> 
> Views/comments?

*YAWN* Don't get hooked. Easy.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]


#101455

From"David B." <DavidB@nomail.afraid.invalid>
Date2017-02-28 17:42 +0000
Message-ID<MDitA.744828$Be.321865@fx27.fr7>
In reply to#101436
On 28/02/2017 15:43, Jolly Roger wrote:
> David B. <DavidB@nomail.afraid.invalid> wrote:
>> Movie night? Nope. It's a fake iTunes receipt from phishers targeting
>> Apple users
>>
>> Put the popcorn away… there aren’t any movie purchases here.
>>
>> David Bisson | February 26, 2017 6:08 pm
>>
>> https://www.grahamcluley.com/itunes-movie-phishing/
>>
>> Views/comments?
>
> *YAWN* Don't get hooked. Easy.

I didn't mean to bore you.

What would YOU like to discuss?


[toc] | [prev] | [next] | [standalone]


#101452

FromSavageduck <savageduck1@{REMOVESPAM}me.com>
Date2017-02-28 09:16 -0800
Message-ID<2017022809165198502-savageduck1@REMOVESPAMmecom>
In reply to#101433
On 2017-02-28 15:29:08 +0000, "David B." <DavidB@nomail.afraid.invalid> said:

> Movie night? Nope. It's a fake iTunes receipt from phishers targeting 
> Apple users
> 
> Put the popcorn away… there aren’t any movie purchases here.
> 
> David Bisson | February 26, 2017 6:08 pm
> 
> https://www.grahamcluley.com/itunes-movie-phishing/
> 
> Views/comments?

They arrive in my SPAM folder from time to time. Take a look at this 
recent phishing attempt, which looks like it was translated from 
Serbo-Croatian to English.
<https://dl.dropboxusercontent.com/u/1295663/FileChute/screenshot_400.jpg>
-- 
Regards,

Savageduck

[toc] | [prev] | [next] | [standalone]


#101453

From"David B." <DavidB@nomail.afraid.invalid>
Date2017-02-28 17:38 +0000
Message-ID<UAitA.744826$Be.303370@fx27.fr7>
In reply to#101452
On 28/02/2017 17:16, Savageduck wrote:
> On 2017-02-28 15:29:08 +0000, "David B." <DavidB@nomail.afraid.invalid>
> said:
>
>> Movie night? Nope. It's a fake iTunes receipt from phishers targeting
>> Apple users
>>
>> Put the popcorn away… there aren’t any movie purchases here.
>>
>> David Bisson | February 26, 2017 6:08 pm
>>
>> https://www.grahamcluley.com/itunes-movie-phishing/
>>
>> Views/comments?
>
> They arrive in my SPAM folder from time to time. Take a look at this
> recent phishing attempt, which looks like it was translated from
> Serbo-Croatian to English.
> <https://dl.dropboxusercontent.com/u/1295663/FileChute/screenshot_400.jpg>

Unbelievable! ;-)

-- 
"Do something wonderful, people may imitate it." (Albert Schweitzer)

[toc] | [prev] | [standalone]


Back to top | Article view | comp.sys.mac.system


csiph-web