Apple Users Targeted by Sophisticated Password Reset Scam
-
Decline all password reset prompts, even if they look official. Attackers are spoofing the alerts.
-
Don't answer phone calls that appear to be from Apple Support. Attackers are using call spoofing.
-
Temporarily change your phone number associated with your Apple ID to stop the alerts.
-
The password reset system seems to have a rate limit problem, allowing too many requests.
-
Apple has not yet fixed this issue that's been reported for at least 2 years. A senior engineer claimed turning on Recovery Key would help, but it does not.