Serious warning to all iPhone users as cyberattacks aim to lock them out of their devices

A new report released today found that 1.46 billion active iPhone users worldwide are victims of a cyberattack targeting their Apple ID. The attackers are using a phishing campaign, sending emails and text messages designed to look like they’re from Apple. These fake emails and text messages try to trick the victim into clicking a link to read an important iCloud notification. Security firm Symantec discovered this month that the links lead to fake websites that ask recipients to reveal their Apple IDs. It’s worth noting that the fake website includes a Captcha to make it look like the real site.

This request may be phrased in a way that makes it seem urgent to pass on this information, which is absolutely false. Apple suggests that iPhone owners add two-factor authentication (2FA) to add an extra layer of security to their Apple ID. To access an Apple account using 2FA, the user will receive an SMS with a special one-time six-digit code that must be entered to access the Apple account.

Make sure two-factor authentication is enabled for your Apple ID|Image Source: PhoneArena - Serious warning to all iPhone users as cyberattacks aim to lock them out of their devices

Make sure two-factor authentication is turned on for your Apple ID|Image Source: PhoneArena

Once bad actors change your Apple ID and password, they can lock you out of your iPhone, open your banking and financial apps, change your passwords, and drain your assets in the blink of an eye. With two-factor authentication, you should still be able to block attackers from changing your Apple ID password.

To enable two-factor authentication (2FA) for your Apple ID on iPhone, go to Settings > (Your name) > Login and security. Tap Turn on Two-Factor Authentication, then tap Continue. Enter your trusted phone number (the number that will be used to send your six-digit 2FA codes), then tap Next. The code will be sent to your trusted phone number.

Security firm Symantec said it issued the warning on July 2. The company said, “These credentials are highly valued, providing control over devices, access to personal and financial information, and the potential for revenue from unauthorized purchases. Additionally, Apple’s strong brand reputation makes users more likely to trust deceptive messages that appear to come from Apple, making these targets even more attractive to cybercriminals.”

If you get an email or text from Apple, make sure you don’t click on any links. And don’t forget to use the tips above to add 2FA to your Apple ID.