Apple ID Harvesting, now this is a good phish.
Summary: Cisco Talos documented a phishing email that closely mimics Apple's verification format, with few grammar or capitalization errors, sent from the domain appleid.co.uk. The embedded link uses Apple's "webobjects" naming to disguise its true destination, gb-appleid[.]net, and the resulting page loads images from gb-appleid[.]com while harvesting Apple credentials. The whois records show the domain registered through "Crazy Domains, LLC" in London, which the write-up cites as the giveaway.
Why it matters: A single harvested Apple ID hands the attacker the victim's entire Apple ecosystem, including email and iTunes, and the phish's near-flawless formatting means the usual grammar tells won't flag it.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026