Recently, some Apple users have fallen under a cyber-attack called “Push Bombing” or “MFA(multi-factor authentication)Fatigue”.
In these attacks, Apple users are repeatedly sent a push notice to Allow or Deny a password reset on their Apple account. Sometimes, a user may receive 100 or more of these notifications, and those notifications can show up on all your Apple devices. If a user allows one of these password resets, then the scammers can change your password and lock you out of your account.
Even if a user denies all of the prompts, they may still get a phone call from scammers claiming to be from Apple Support, because the scammers know the phone number associated with the user’s Apple account.
The purpose of the scammer’s call is to try to get the user to initiate a request for an Apple ID reset code which is sent to the user’s device as a text message that includes a one-time password. If the user supplies that one-time code to the fake Apple Support caller, the attackers will use that information to reset the password on the user’s account and lock the real user out of their own account. Once the scammer has control of your account, they can also remotely wipe all of your Apple devices.
If you did not initiate a password reset yourself on your Apple device, you should always deny those prompts. And if you get a call from someone claiming to be an Apple Support person, be aware that Apple never initiates outbound calls to customers, unless the customer has first requested to be contacted. So, in those situations, hang up on the person who called you, and then contact the official Apple Support Center yourself to see if there really is an issue. You can’t trust that a caller really is who they say they are.
For more information, please see the article at:
https://krebsonsecurity.com/2024/03/recent-mfa-bombing-attacks-targeting-apple-users/
