Latest Scam To Get Your Apple Id.

Question

Hi,
Just for sharing. Recently i've lost my ipad mini 2 wifi only(with passcode on, ios 8.2). I gone through many website try to find a way to track or recover but there's no solution except changing my apple id password for security reason. But 2 days ago someone send me a sms to my phone (since i use find my iphone apps and report as lost phone with my handphone number hope that someone will contact me). that person just mention they bought an stolen ipad from somehwere and ask me as if i were owner. Of course i replied yes and told them i would pay some money for them if they return the ipad to me. But there's no reply. The next day i got a sms stated that : LOST IPAD LOCATION HAS BEEN FOUND, PLEASE SIGN IN AND VERIFY YOU APPLE ID ON HTTP://verify.appleidlocation.com APPLE SUPPORT.
SInce i'm curious and hope can track my ipad, i log on to the web which looks exactly like apple website but its fake( its really hard to tell its fake). The page ask you to log in with your apple id and password. After key in everything they will lead you to the original apple website(even you key in whatever invalid email and password). After found out that something was wrong and i try to track the ipad using the find my iphone apps and its gone.
What i understand is with the new ios 8 eventhough u lost your apple product as long as you report as lost phone using find my iphone app, other people cannot reuse the apple product unless they know the previous owner apple id and password. Now they will use this way to get your apple id and password:
1. Get the previous owner hand phone number.
2. Send them a text message that notice them their lost product were detected and log on to an apple fake website verify.appleidlocation.com
3. After they key in the apple id and password, (Voilà, they got your apple id and password), the page will lead you to original apple website after u log in.
4. Party with your apple product.
If you have time feel free to try out that website Verify.appleid.location.com. Just type in anything for apple id and password. They will appear a message apple id verified and jump to apple original website.
Hope apple will take down the site verify.appleidlocation.com so that nobody will get cheated.

Answer 1

Boonaboon wrote:
Hi,
Just for sharing. Recently i've lost my ipad mini 2 wifi only(with passcode on, ios 8.2). I gone through many website try to find a way to track or recover but there's no solution except changing my apple id password for security reason. But 2 days ago someone send me a sms to my phone (since i use find my iphone apps and report as lost phone with my handphone number hope that someone will contact me). that person just mention they bought an stolen ipad from somehwere and ask me as if i were owner. Of course i replied yes and told them i would pay some money for them if they return the ipad to me. But there's no reply. The next day i got a sms stated that : LOST IPAD LOCATION HAS BEEN FOUND, PLEASE SIGN IN AND VERIFY YOU APPLE ID ON HTTP://verify.appleidlocation.com APPLE SUPPORT.
SInce i'm curious and hope can track my ipad, i log on to the web which looks exactly like apple website but its fake( its really hard to tell its fake). The page ask you to log in with your apple id and password. After key in everything they will lead you to the original apple website(even you key in whatever invalid email and password). After found out that something was wrong and i try to track the ipad using the find my iphone apps and its gone.
Rule #1
NEVER follow a link in an email or SMS message.
You should have gone directly to icloud.com and signed in to check the location of your iPad. This is a social engineering attack that works successfully as planned. Here's the domain information:
http://www.networksolutions.com/whois/results.jsp?domain=AppleIdLocation.com
Looks like the domain was created on April 9, 2015
By the way, if you use the same username/password on other websites, change those passwords as soon as you can before the bad guys take over your other accounts.