Wednesday, 11 March 2015

appleverificationfor-uk.com Apple payment fraud alert iCloud Org.phishing emails

Alert Summary:

Apple payment fraud alert iCloud Org. appleverificationfor-uk.com phishing emails

Sample Message headers:
From: "iCloud Org." {astrid3168234.2d0e7@investrmi.com}
Subject: Apple payment fraud alert
Sample Message body:
Dear Apple customer

Your Apple profile recently made a fraudulent payment .
To reverse this change you must verify your account

Verify Now >

Why you received this email.
Apple request verification whenever a fraudulent payment has been made .

If you didn't make this change or if you believe an unauthorized person is
attempting to access your account, you can reset your password by going
to My Apple ID

Apple Support


My Apple ID | Support | Privacy Policy
Copyright 2015 Apple Sarl 80102, Rue Sainte Zithe, L-2696 Luxembourg Copyrighted. ---------------------------------------------- The message was checked by Zillya Antivirus 2.0.579.0, bases 2.0.0.2093 - No viruses detected
 The Url to the fake site is:
http://appleverificationfor-uk.com/verifyuknow/

The fake phishing site above looks like this:
The fake apple domain was recently set-up, details here:
Domain Name: APPLEVERIFICATIONFOR-UK.COM
Registry Domain ID: 1907324668_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tldregistrarsolutions.com
Registrar URL: http://www.tldregistrarsolutions.com
Updated Date: 2015-03-11T16:37:51Z
Creation Date: 2015-03-05T17:23:29Z
Registrar Registration Expiration Date: 2016-03-05T17:23:29Z
Registrar: TLD Registrar Solutions Ltd.
Registrar IANA ID: 1564
Registrar Abuse Contact Email: abuse@tldregistrarsolutions.com
Registrar Abuse Contact Phone: +44.2034357312
Reseller: 
Domain Status: clientTransferProhibited - http://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID: 
Registrant Name: Danuta Kowalska
Registrant Organization: 
Registrant Street: 10 sezam street
Registrant City: ny
Registrant State/Province: 
Registrant Postal Code: 82819
Registrant Country: US
Registrant Phone: +1.3328189192
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email: danuta-kowalska88@wp.pl
Registry Admin ID: 
The fake phishing site will also ask you to hand over your credit card details too....
Cheers,

Steve
Sanesecurity.com

No comments: