Kaspersky Lab detects Phishing Scams using Fake Apple Site

To analyze the dramatic increase of cybercriminal campaigns stealing users’ Apple IDs and account information by fraudulent phishing sites, Kaspersky Lab has revealed the findings of a phishing report. Cybercriminals are using the fake Apple sites to try and trick users into submitting their Apple ID credentials, which would enable the criminals to steal the users’s account login and access the victim’s personal data, information and credit card numbers stored on their iCloud and iTunes accounts. 

The phishing report detected an average of 200,000 attempts per day of users trying to access the phishing sites from January 2012 through May 2013.  The increase in average detection is a marked increase compared to 2011, which averaged only 1,000 detections per day.

Additionally, Kaspersky Lab’s experts analyzed the cybercriminals’ behaviour and patterns on a daily and monthly basis, noticing that fluctuations and increases in phishing attempts often coincided with large events from Apple.

Another method of stealing Apple customers’ credit card information was done by sending users an email requesting them to verify and update their credit card credentials attached to their Apple IDs.