Online Scams' Target Apple Customers

As most of you know by now, I'm very conservative in the amount of items I post. There's only two reasons I do this:


1. If I think there's a topic of value to my clients
2. If I think there's a potential threat to your computer or internet security. 

On this occasion, I'm forwarding a story from the BBC regarding the increased risk to Apple users from cyber criminals. I do not send this to freak anyone out. The purpose is to make you informed, so that should you be exposed to a potential scam, an alarm will go off in your head, and hopefully prompt you to verify that the link you're being asked to click, is not a fake.

Please feel free to contact me if you have any further questions. 

David Rosenberg
Alive Solutions


Cybercriminals are targeting people using Apple products as they are more likely to have disposable income, a security expert has warned.

Blogger Graham Cluley said that while malware was more common on Windows, Apple customers could not "afford to be lackadaisical" about security.

On Monday, he reported a text message scam that tried to trick people into handing over account information.

Apple's support site warns customers not to enter details on spoof sites.

The text message scammers sent out alerts to victims' smartphones, claiming their Apple ID accounts were going to expire. The message encouraged people to visit a fake website where they were asked to enter their account information.

"It tried to grab personal information and credit card details with the aim of committing identity theft," said Mr Cluley.

"They deliberately took advantage of people's trust in the Apple brand to steal information.

"Avoid clicking on links in emails because they might take you somewhere phishy. Instead go to the website directly and log in that way."

The spoof website has since been blocked by web browsers such as Chrome and Firefox.

Apple's support website says customers "should never enter Apple account information on any non-Apple website".

"In general, all account-related activities will take place in the iTunes application directly, not through a web browser," it explains.

On Tuesday, Mr Cluley reported a second scam disguised as an update to Adobe Flash, which encouraged victims to install a new version of the software.

He wrote in his blog: "The best advice for many users may be to ensure that you have configured Adobe Flash Player to automatically update itself.

Apple's Mac OS X operating system does have a safeguard, enabled by default, that prevents people installing software written by unknown developers. However, it appears the attackers were able to circumvent this.

"The fake Flash update attack appears to have used a stolen Apple Developer certificate, suggesting that some third-party Mac developers may be being sloppy about their own security and putting the rest of us at risk as a result," Mr Cluley told the BBC.

"The truth is that criminals will go where the money is.

"Apple products cost more than some of their competitors so it's likely that their customers have more disposable income. That's cash which the bad guys would like to have filling their pockets."