Anyone changed their Apple ID recently?

Anyone changed their Apple ID recently?

Author
Discussion

NDA

Original Poster:

21,615 posts

226 months

Tuesday 2nd September 2014
quotequote all
I did today - the confirmations from Apple came from:

appleid@id.apple.com

and

appleid_gben@email.apple.com


I'm sure they're fine but I've convinced myself that they're not genuine Apple addresses! Anyone know where the confirmations come from?

I was also directed here:

https://idevicedepartment.co.uk/managemyappleaccou...

Which doesn't look right either.

NDA

Original Poster:

21,615 posts

226 months

Tuesday 2nd September 2014
quotequote all
That's interesting - thanks for looking.

I have changed my password and iTunes, iMessage, iCloud etc are all working. That weird page does have some details on me correctly (home address, phone number and the serial numbers of a couple of Apple products I own). But I'm now not sure if my Apple account has been hacked or not.

NDA

Original Poster:

21,615 posts

226 months

Tuesday 2nd September 2014
quotequote all
marshalla said:
Probably filled in automatically by your browser.

If you entered your credit or debit card details into that site - get on the phone to the card issuer too.

ROFL - just had another look at it and entered some new fake details - the "log in" now redirects me to a Google Search for "Free Child Porn". Nice try - if only they knew what I do for a living.

Edited by marshalla on Tuesday 2nd September 21:52
Golly - I got the right PH'er on the end of my thread! smile

I have changed my Apple ID and, via iTunes (on my Mac) it asked me to enter my credit card code (it already had the card number). This was via iTunes and therefore secure.

I have not entered my card details on that fake page.

Yikes! Feeling a bit wobbly.

NDA

Original Poster:

21,615 posts

226 months

Tuesday 2nd September 2014
quotequote all
marshalla said:
At least you checked here first and seem to have had time to act before they did.

I've reported the domain to Nominet directly so they can log it, block the registrant and act against the registrar if necessary.
Good work - thanks.

I'm still left with some anxiety that I've been hacked. The false page loaded up my email address and password automatically - but I didn't click through/'submit'.

NDA

Original Poster:

21,615 posts

226 months

Wednesday 3rd September 2014
quotequote all
gpo746 said:
Can I just say a really BIG GENUINE THANK YOU to Marshalla for being so helpful and so blunt with the OP
Its posts like these that reaffirm my belief that fundamentally people on here like to help others
Totally well done .
Yes indeed.....

PH'ers are a good lot when you need them - there are a lot of skills lurking here. Which is why I wanted to check.

I'm alive to Phishing, but this time it nearly caught me as it coincided with an Apple purchase.

NDA

Original Poster:

21,615 posts

226 months

Thursday 4th September 2014
quotequote all
marshalla said:
Quick update - it looks like the registrar has suspended the domain, but the entries are still in DNS, and the hosting company are refusing to take action (won't name them, but if you look at the nameservers you'll see who they are). It *should* fall off the 'net soon.
That's great you followed up - thanks, from me and whoever else might have nearly been scammed.

We tend to think of phishing as rogues chancing their luck - but the truth is that it's theft of hard earned cash. I shouldn't have had 30 minutes of blind panic.

Anyhoo, moment passed. Thanks so much for your advice - really helpful and appreciated.