{"id":2687,"date":"2019-04-06T19:34:10","date_gmt":"2019-04-06T19:34:10","guid":{"rendered":"http:\/\/www.syyhoaxanalyzer.com\/?p=2687"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T17:00:00","slug":"Phishing---Fake-Apple-Invoice-Delivered-as-Attached-PDF","status":"publish","type":"post","link":"http:\/\/www.syyhoaxanalyzer.com\/?p=2687","title":{"rendered":"Phishing &#8211; Fake Apple Invoice Delivered as Attached PDF"},"content":{"rendered":"<div>\n<p>Inboxes are being hit by emails with the subject line &#8220;#order detail&#8221; or \u00a0 &#8220;Your receipt from Apple&#8221;. \u00a0 The &#8220;from&#8221; line in the emails implies that Apple sent them. \u00a0 <\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Top Content Responsive --><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"4870821038\"\n     data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<p>In some versions the brief message that makes up the body of the emails simply notes that &#8220;all detail attached on PDF&#8221;. Other version have a little more information including the name of the product supposedly purchased. These also urge you to check a PDF attachment for details.<\/p>\n<p>In fact, the emails have no connection to Apple and the attached PDF does not contain a genuine Apple invoice.<\/p>\n<p>The emails are \u00a0<a href=\"http:\/\/hoax-slayer.net\/phishing-scams-anti-phishing-information\/\">phishing scams<\/a> designed to steal your Apple ID, your credit card numbers, and other sensitive personal information.<\/p>\n<h2>Here&#8217;s what the initial scam emails looks like:<\/h2>\n<p><a href=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-phishing-scam-090518-1.jpg\" data-rel=\"penci-gallery-image-content\" ><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"19773\" data-permalink=\"https:\/\/www.hoax-slayer.net\/fake-apple-invoice-pdf\/apple-phishing-scam-090518-1\/\" data-orig-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-phishing-scam-090518-1.jpg\" data-orig-size=\"600,595\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"apple-phishing-scam-090518-1\" data-image-description=\"\" data-medium-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-phishing-scam-090518-1-300x298.jpg\" data-large-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-phishing-scam-090518-1.jpg\" class=\"aligncenter size-full wp-image-19773\" src=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-phishing-scam-090518-1.jpg\" alt=\"Apple Phishing Scam\" width=\"600\" height=\"595\" srcset=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-phishing-scam-090518-1.jpg 600w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-phishing-scam-090518-1-150x150.jpg 150w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-phishing-scam-090518-1-300x298.jpg 300w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-phishing-scam-090518-1-500x496.jpg 500w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-phishing-scam-090518-1-585x580.jpg 585w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<pre><strong>From: Apple ld \u00a0<\/strong>\r\n<strong>Subject: #order detail<\/strong>\r\n\r\nall detail attached on PDF.\r\n\r\n<em>Attachment: #yourinvoice.pdf \u00a0<\/em><\/pre>\n<h2>Here&#8217;s what the attached PDF looks like:<\/h2>\n<p><a href=\"http:\/\/hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-1.jpg\" data-rel=\"penci-gallery-image-content\" ><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"15825\" data-permalink=\"https:\/\/www.hoax-slayer.net\/fake-apple-invoice-pdf\/apple-invoice-pdf-12-2017-1\/\" data-orig-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-1.jpg\" data-orig-size=\"800,633\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"apple-invoice-pdf-12-2017-1\" data-image-description=\"\" data-medium-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-1-300x237.jpg\" data-large-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-1.jpg\" class=\"aligncenter size-full wp-image-15825\" src=\"https:\/\/hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-1.jpg\" alt=\"Fake Apple Invoice PDF\" width=\"800\" height=\"633\" srcset=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-1.jpg 800w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-1-300x237.jpg 300w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-1-768x608.jpg 768w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-1-500x396.jpg 500w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-1-585x463.jpg 585w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>The scammers hope that you will click the Order ID link or one of the support links in the mistaken belief that you have been charged for a product or servcie that you never purchased.<\/p>\n<p>All of the links in the PDF open a fraudulent website that looks almost exactly like the genuine Apple home page. \u00a0 After logging in on the fake site with your Apple ID, the following notice will be displayed:<br \/>\n<a href=\"http:\/\/hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-2.jpg\" data-rel=\"penci-gallery-image-content\" ><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"15826\" data-permalink=\"https:\/\/www.hoax-slayer.net\/fake-apple-invoice-pdf\/apple-invoice-pdf-12-2017-2\/\" data-orig-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-2.jpg\" data-orig-size=\"800,392\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"apple-invoice-pdf-12-2017-2\" data-image-description=\"\" data-medium-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-2-300x147.jpg\" data-large-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-2.jpg\" class=\"aligncenter size-full wp-image-15826\" src=\"https:\/\/hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-2.jpg\" alt=\"Apple ID locked Scam Page\" width=\"800\" height=\"392\" srcset=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-2.jpg 800w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-2-300x147.jpg 300w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-2-768x376.jpg 768w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-2-500x245.jpg 500w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-2-585x287.jpg 585w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>If you click &#8220;Unlock Account&#8221;, the following &#8220;Account Verification&#8221; form will appear. \u00a0 The bogus form asks for your name, address and contact details, your credit card numbers, and the security question attached to your account:<\/p>\n<p><a href=\"http:\/\/hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-3.jpg\" data-rel=\"penci-gallery-image-content\" ><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"15827\" data-permalink=\"https:\/\/www.hoax-slayer.net\/fake-apple-invoice-pdf\/apple-invoice-pdf-12-2017-3\/\" data-orig-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-3.jpg\" data-orig-size=\"800,756\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"apple-invoice-pdf-12-2017-3\" data-image-description=\"\" data-medium-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-3-300x284.jpg\" data-large-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-3.jpg\" class=\"aligncenter size-full wp-image-15827\" src=\"https:\/\/hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-3.jpg\" alt=\"Fake Apple Account Verification Form\" width=\"800\" height=\"756\" srcset=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-3.jpg 800w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-3-300x284.jpg 300w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-3-768x726.jpg 768w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-3-500x473.jpg 500w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2017\/12\/apple-invoice-pdf-12-2017-3-585x553.jpg 585w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p>After submitting the form, you may see a final notice that claims that you have successfully unlocked your account and reversed the supposed purchase.<\/p>\n<p>But, now, the criminals can collect the information you supplied and use it to take control of your Apple ID. Once in, they can make purchases in your name, use your Apple email account to distribute, spam, scam, and malware emails, and steal information from your iCloud files.<\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block; text-align:center;\"\n     data-ad-format=\"fluid\"\n     data-ad-layout=\"in-article\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"9162856233\"><\/ins><br \/>\n<script>\n     (adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<p>They can also use your credit card to conduct fraudulent transactions. \u00a0 And, armed with all of the personal information they have gathered, they may also be able to steal your identity.<\/p>\n<p>In this attack, the scammers have included the fraudulent invoice as an attached PDF in an attempt to thwart spam filters that may have otherwise flagged the email.<\/p>\n<p>Apple phishing scams are <a href=\"http:\/\/hoax-slayer.net\/apple-id-used-phishing-scam\/\">very common<\/a> and take <a href=\"http:\/\/hoax-slayer.net\/problem-with-your-apple-id-phishing-scam\/\">many forms<\/a>. \u00a0 \u00a0The Apple website includes a page that <a href=\"https:\/\/support.apple.com\/en-au\/HT204759\">explains how to recognise and report such scam attempts<\/a>.<\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- Third Content Ad Responsive --><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"1909104632\"\n     data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<div align=\"center\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Bottom AdLinks --><br \/>\n<ins class=\"adsbygoogle\" style=\"display: block;\" data-ad-client=\"ca-pub-0355887770822260\" data-ad-slot=\"1358951439\" data-ad-format=\"link\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/div>\n<p><\/br><\/br> Original Source : <a href=\"https:\/\/www.hoax-slayer.net\/fake-apple-invoice-pdf\/\" target=\"_blank\">https:\/\/www.hoax-slayer.net\/fake-apple-invoice-pdf\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Inboxes are being hit by emails with the subject line &#8220;#order detail&#8221; or \u00a0 &#8220;Your receipt from Apple&#8221;. \u00a0 The &#8220;from&#8221; line in the emails implies that Apple sent them. \u00a0 In some versions the brief message that makes up the body of the emails simply notes that &#8220;all detail attached on PDF&#8221;. Other version [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":6890,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2687","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hoax-inggris"],"_links":{"self":[{"href":"http:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/2687"}],"collection":[{"href":"http:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2687"}],"version-history":[{"count":0,"href":"http:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/2687\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/media\/6890"}],"wp:attachment":[{"href":"http:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2687"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2687"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2687"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}