Why in news?
The Indian Cybercrime Coordination Centre (I4C) has issued an advisory warning iPhone users about a phishing campaign in which criminals send fraudulent text messages posing as Apple support. The messages claim a device has been found and ask recipients to click on a link to recover it. Clicking the link leads to a fake website designed to steal Apple ID credentials and one‑time passwords.
Background
I4C, set up in 2018 under the Ministry of Home Affairs, coordinates investigations and responses to cybercrime across India. It runs the 1930 cybercrime helpline and the Cyber Dost social media initiative, which shares safety tips. The centre analyses emerging threats and disseminates advisories to the public.
How the phishing scheme works
- Fake SMS alerts: Victims receive a message that looks like Apple’s “Find My iPhone” notification, saying the device has been located.
- Malicious links: The message contains a link that directs users to a site mimicking Apple’s account recovery page. Entering login details and the one‑time password allows fraudsters to access the victim’s Apple ID.
- Device unlocking: Once the criminals have the login credentials, they remove the Apple ID from a stolen device and turn off security features, making it harder to trace or remotely lock the phone.
Advice from I4C
Users are urged not to click on links in unsolicited messages and to verify alerts by checking the Find My app or logging in directly through Apple’s official website. If a phone is lost, owners should contact Apple support through authorised channels and report any fraud attempts to the national cybercrime helpline (1930) or the portal cybercrime.gov.in. The alert underscores the importance of digital hygiene and awareness in an era of rising online scams.