New hacker attack discovered through series of notifications asking victim to reset Apple ID password
A businessman named Parth Patel suffered new iPhone phishing attack. The attack is very sophisticated and users are convinced to reset their Apple ID password by taking advantage of a bug in the reset function itself by bombarding the user with notifications.
This hacker attack is very delicate and could compromise your iPhone via notifications
As explained in a publication of, Your iPhone and other Apple devices received a large number of password reset notifications. Since this is a system level notification, it is not possible to use the device until the notification is acknowledged.
The attackers carried out a targeted attack against me, using OSINT data from People Data Labs and caller ID spoofing.
First, around 6:36 p.m. yesterday, all my Apple devices started blowing up with password reset notifications.
Because these are Apple system level alerts,… pic.twitter.com/vX1AZvoVoN
– Parth (@parth220_) March 23, 2024
He received over 100 requests to reset his Apple ID password. after 15 minutes received a mysterious callposing as someone from Apple Support who spoofed the official phone number.
I was aware of the problem and asked them to validate the information about me before answering their questions.
Therefore, the person on the other end of the mobile phone has correctly provided their personal information. Patel confirmed the scam after asking himself to confirm his full name. The scammer had another person’s name, Anthony S. Interestingly, the scammer indicated that he was using data from People Data Labs, this platform is a collector and seller of personal data that, in the past, has already exposed over a billion records.
Finally, received a code supposedly belonging to your Apple ID with a “Don’t share it with anyone”. Fortunately, in the first notifications, it did not allow any type of movement and did not provide any other information that could compromise your Apple ID password. He admits that other colleagues were the targets of this attack and did not fall into the trap either..
Ultimately, the last thing they asked for was an OTP that explicitly said “Don’t share it with anyone.”
Approving on the first reset notification spam attack OR sharing this code would have gotten me pwned. pic.twitter.com/RQHRUre5ds
– Parth (@parth220_) March 23, 2024
Never share password reset codes, they are yours if you try to reset your password
We can’t imagine if these types of attacks would come to us as Parth Patel mentioned. It’s more curious how they managed to pass themselves off as official Apple support with the same phone number. It’s important for you to know that Apple Support will never call you out of the blue.the only way is to request this call through the support app or through the website. Apple ID reset code should never be in the hands and eyes of anyone other than yours.
It’s unclear whether Apple is already aware of these issues with the phishing attack, but it should get to work preventing new attacks in the future. Apple must particularly strive to prevent this type of attack, so that they do not reach users who are unaware of these problems. PleaseIf you have read this far, Share this situation with your friends or familywe never know when we will be the target of a hacker attack.
