A new scam targeting Apple users has resurfaced, preying on concerns about low iCloud storage. The scheme aims to deceive individuals into divulging their private information. iCloud, Apple’s cloud storage service, plays a crucial role for many iPhone users by serving as a digital backup platform, safeguarding photos, documents, and other essential files from accidental deletion or loss.
Furthermore, iCloud simplifies the process of transitioning between devices like iPhones, iPads, and Macs, as it centralizes all data. Despite its convenience, iCloud has a downside of limited storage unless users opt for additional space by paying a fee. Scammers exploit these limitations by instilling fear of account suspension due to full storage, coercing victims into sharing personal and financial data.
Although iCloud scams are not new, cybersecurity experts at Malwarebytes have noticed a surge in fake emails alleging insufficient storage space. These fraudulent messages, purportedly from Apple, claim that iCloud storage has reached its limit, halting file backups. Users are prompted to upgrade their storage plan via a link leading to a counterfeit website designed to harvest sensitive information.
Malwarebytes cautioned, “The fear of losing precious photos is a potent tactic, prompting scammers to steal personal and financial details.” The fraudulent emails vary in content but share a common theme of requesting a small payment to prevent deletion of files in iCloud storage.
To ensure safety, users are advised to follow specific guidelines. Firstly, Apple does not send unsolicited emails regarding iCloud storage issues. Notifications about nearing storage capacity appear within device settings or as official system alerts, not via external links in unsolicited emails or text messages. Users should directly access their device settings to review iCloud usage if needed.
In addition, five rules have been outlined for secure iCloud usage:
1. Access your account solely through Apple’s official website or device settings.
2. Never share your password with anyone.
3. Avoid clicking on links in unexpected emails or messages without verifying their authenticity.
4. Utilize updated anti-malware software with enabled web protection.
5. Refrain from engaging with dubious websites or payment requests to mitigate risks of falling victim to scams.
