Phishing Example: Last Reminder You Must Update Your Apple Account Information!

March 13, 2016

What makes this a Phishing message?

  • The sender's address in the "From" line contains a misspelling of "Apple" and is not from the "@apple.com" domain.
  • "Hello" is an informal greeting that is inappropriate coming from a reputable business.
  • Always be suspicious of messages suggesting your account information is incorrect and needs updating - never click on the verification link.
  • While the links at the bottom of the page are directed to real Apple web sites, the Luxembourg address at the bottom of the message is not the accurate location for Apple headquarters.


Original Message:

Subject: Last Reminder You Must Update Your Account Apple Information!
From: "Appel.support" <Appel@support.com>
Date: 3/13/2016 1:32
To: xxxx@berkeley.edu

Hello,

We've noticed that some of your account information appears to be missing or incorrect, we need to verify your account information in order to continue using your Apple ID.

Please Verify your account information by clicking on the link below. Sign in using your Apple ID to start the process, Verify Now >
Wondering why you got this email?

When you don't regularly update your Apple ID information, Apple will require you to sign in by following the link in a verification email and update your information.
This is to help protect your identity and keep your account secure.

Apple Support

My Apple ID | Support | Privacy Policy
Copyright © 2016 Apple S.à r.l. 31-33, rue Sainte Zithe, L-2763 Luxembourg.? All Rights Reserved.

Return to The Phish Tank or Phishing Examples Archive

Topics

Warning:  The links and email addresses included in these messages are from real-life examples, do not attempt to explore them.

The most dangerous links have been removed - you can hover your cursor over these links to see the original address in a pop-up techtip (instead of in the corner of the browser window).
Report suspected phishing emails to consult@berkeley.edu. Be sure to include the entire text of the message, including the email header.