Amazon3

Amazon

Showing posts with label account verification. Show all posts
Showing posts with label account verification. Show all posts

Thursday, 8 January 2015

uk-authorize-apple.com uk-authorize-icloud.com Apple phishing

Account verification/ Billing information/ billing details/ account details Apple phishing emails,which were reported on the blog earlier, are back again.

Lots of different From addresses and Subjects.

Sample Message headers:
Subject: Account deactivated - action required
Subject: Account verification failed
Subject: Account verification required
Subject: Billing information expired
Subject: iCloud Account verification failed
Subject: Please confirm your billing details
Subject: Please update your account details
Subject: Your Apple account requires verification

From: "Apple Co" {grand.hotel@maine207.org}
From: "Apple Ltd" {michaell@investrmi.com}
From: "Apple Org" {aig@stockton-house.com}
From: "Apple Org" {alice@city.woodstock.on.ca}
From: "Apple SarL" {support@apple.cm}
From: "Apple support" {support@apple.cm}
From: "AppleID Support" {support@apple.cm}
From: "Your Apple support" {noc@stockton-house.com}
From: "Your Apple support" {vburke@investmarkfinancial.com}

Sample Message body:
Dear Apple User,
We are constantly working to increase security for all our users, and to ensure maximum account security we periodically check and review accounts.

Your account has be placed on restricted status as we were unable to verify some of the billing information associated with your account. This can be due to either of the following reasons:

1. A recent change in billing information
2. Invalid billing information entered intially during the registration process.
Please note that we are obligated to deactivate accounts that are not verified withing 3 days.
In order to complete account verification, please visit the reference link below to update your billing information:
Thanks,
Apple Online Accounts Support

The above link to Apple site, doesn't take you there but instead takes you to a fake phishing site:
http://uk-authorize-icloud.com/
http://uk-authorize-apple.com/
The fake phishing site above looks like this:
The fake apple domain was recently set-up, details here:
 Domain Name: UK-AUTHORIZE-APPLE.COM
   Registrar: TLD REGISTRAR SOLUTIONS LTD
   Sponsoring Registrar IANA ID: 1564
   Whois Server: whois.tldregistrarsolutions.com
   Referral URL: http://www.tldregistrarsolutions.com
   Name Server: NS-CANADA.TOPDNS.COM
   Name Server: NS-UK.TOPDNS.COM
   Name Server: NS-USA.TOPDNS.COM
   Status: clientTransferProhibited
   Updated Date: 08-jan-2015
   Creation Date: 07-jan-2015
   Expiration Date: 07-jan-2016

Domain Name: UK-AUTHORIZE-APPLE.COM
Registry Domain ID: 1894514293_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tldregistrarsolutions.com
Registrar URL: http://www.tldregistrarsolutions.com
Updated Date: 2015-01-08T19:20:30Z
Creation Date: 2015-01-07T18:12:24Z
Registrar Registration Expiration Date: 2016-01-07T18:12:24Z
Registrar: TLD Registrar Solutions Ltd.
Registrar IANA ID: 1564
Registrar Abuse Contact Email: abuse@tldregistrarsolutions.com
Registrar Abuse Contact Phone: +44.7546458118
Registry Registrant ID: 
Registrant Name: Marcin Wozniak
Registrant Organization: 
Registrant Street: 212 HOOVER STREET
Registrant City: Napa
Registrant State/Province: California
Registrant Postal Code: 94559
Registrant Country: US
Registrant Phone: +1.324710248
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email: wozniak-marcin91@wp.pl
The fake phishing site will also ask you to hand over your credit card details too....
Cheers,

Steve
Sanesecurity.com
Posted by at 1 comment:
Labels: , , ,

Sunday, 4 January 2015

Apple account suspended or Apple account deactivated phishing

Apple account suspended, iCloud Account verification failed or Apple account deactivated phishing run.
using apple-authorize-uk.com, apple-authorize.com and uk-apple-verify.com

The Apple phishing emails,which were reported on the blog earlier, are the same... just using different
domains.

Lots of different From addresses and Subjects.

Sample Message headers:
From: "Apple Org" {support@apple.cm}
Subject: Account temporarily suspended - action required

From: "AppleID Support" {support@apple.cm}
Subject: Your Apple account requires verification

From: "Your Apple support" {zonaprieta@moldran.com}
Subject: Account information expired

From: "Apple Co" {skearney@packeteer.com}
Subject: Account deactivated - action required

From: "Apple Org" {support@apple.cm}
Subject: Account information update required

From: "Apple support" {mclean@libtrade.com}
Subject: Your account information needs to be updated

From: "AppleID Support" {angie.gonzalez@investrmi.com}
Subject: Billing information update required

From: "Apple Ltd" {support@apple.cm}
Subject: Please update your account details

From: "Apple Co" {webmaster@sbcglobal.net}
Subject: Please confirm your billing details

From: "AppleID Support" {support@apple.cm}
Subject: Apple account verification required

From: "Your Apple support" {support@apple.cm}
Subject: Please update your account details

From: "Your Apple support" {support@apple.cm}
Subject: Billing information expired

From: "Apple Org" {enji_murata@jedstock.com}
Subject: Billing information update required

From: "Your Apple support" {support@apple.cm}
Subject: Account verification failed

From: "Apple SarL" {support@apple.cm}
Subject: Please confirm your account details

From: Apple Co }support@apple.cm}
Subject: iCloud Account verification failed

Sample Message body:
Dear customer,
It has come to our attention that the Billing Information associated with your account are out of date. To maintain account safety and to ensure that the account is in the right hands it is required for you to update your Billing information.
Failure to update your records within 7 days will result in account termination.
Click on the reference link below and update your billing information on the following page to complete account verification:
Thanks,
Apple Customer Support

The above link to Apple site, doesn't take you there but instead takes you to a fake phishing site:
http://apple-authorize-uk.com
http://apple-authorize.com
http://uk-apple-verify.com
The fake phishing site above looks like this:
The fake apple domain was recently set-up, details here:
Domain Name: APPLE-AUTHORIZE-UK.COM
Registry Domain ID: 1893957567_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tldregistrarsolutions.com
Registrar URL: http://www.tldregistrarsolutions.com
Updated Date: 2015-01-04T15:37:30Z
Creation Date: 2015-01-04T05:12:30Z
Registrar Registration Expiration Date: 2016-01-04T05:12:30Z
Registrar: TLD Registrar Solutions Ltd.
Registrar IANA ID: 1564
Registrar Abuse Contact Email: abuse@tldregistrarsolutions.com
Registrar Abuse Contact Phone: +44.7546458118
Reseller: 
Domain Status: clientTransferProhibited
Registry Registrant ID: 
Registrant Name: Dawid Nowak
Registrant Organization: 
Registrant Street: 531 HOOVER STREET
Registrant City: Napa
Registrant State/Province: California
Registrant Postal Code: 94559
Registrant Country: US
Registrant Phone: +1.4850649783
Registrant Phone Ext: 
Registrant Fax: 
Registrant Fax Ext: 
Registrant Email: d.nowakk91@wp.pl
The fake phishing site will also ask you to hand over your credit card details too....
Cheers,

Steve
Sanesecurity.com
Posted by at No comments:
Labels: , , ,
Subscribe to: Posts (Atom)