That’s just made me think of something else about the day. Totally coincidental, but earlier in the day I was looking into what permission the Microsoft Company Portal App had on unmanaged Android and iOS devices for a concerned user.

Then I got the email from Apple support and was like WTF‽ Then I realised it was to my private email and went, damn! How’s that timing.

I’ve done this many times in the past, and not really sure what it was about this call that I didn’t.

That’s just made me wonder how much of a psychological aspects scammers are employing in there scams?

Yeah it was a legit apple support email and I compared it to the email I received after calling apple and starting a new case to give them all the info I could about the scam.

I assume that got my info from a data leak somewhere.

Yeah that’s how I think they did it.

Totally agree that I don’t know the Apple eco system and that made it easier. It was a legit apple support email. Even compared all email headers with the email I received after I called Apple support and opened a new case. I gave them all the info I could.

It was definitely phishing, I’d even say spear phishing as the knew all of my details without me giving it out. I assume from leaked data somewhere.

I’m pretty sure that they were able to create a support case with me details and scheduled it for that time so they had the case number and knew to call before that time.

I had one a about a month ago now that I was actually impressed with how they did it.

I have a Apple account just for the kids Apple devices (required for school). Received an email from Apple support about fraudulent activity and that they’d call at sometimes. I thought that was weird and checked out the email and everything was legit.

Call came in a little early then in the email. They knew all the right details including the case number, sent a verification code to my mobile from a short code SMS “iCloud” and at that point they had me. But only until they asked me to go to a site apple.somebullshit.com. Well apple isn’t going to use a domain that’s not *.apple.com. went there anyway to check and the SSL cert was from Let’s encrypt, apple ain’t using let’s encrypt.

20 years in IT, that’s the closest I’ve been in. Very long time to falling for something.

Thier lesser known sibling was actually a pirate. It’s said that they were one of the most successful pirates ever having buried a vast amount of the treasure they’d acquired. They were always able find what they burried by leaving a signed symbol at the spot. Even though they never learnt to read or write, they’d sign everything with an ‘X’.

But then how would I look at my phone while using my Desktop.

I’ll need a dummy phone to doom scroll on.

Sir! There appears to be a small galaxy heading right for us.

That’s no galaxy! That’s space force!

And it only takes 22 seconds to consume.