Be on the lookout for Apple iTunes phishing email
A clever phishing email is making its way around the Web, attempting to trick people into handing over their Apple user name and password to view a purported update to their iTunes account.
With the subject "Account Info Change," the email appears to come from Apple, but the address is "do_not_reply@itunes.com via smtp.com," meaning it came from a third-party email service, the security firm Trend Micro reported. (Legitimate emails from Apple show an "id.apple.com" address.)
The discrepancy is so small, however, that Trend Micro said the phony emails share an "uncanny and almost identical resemblance" to real Apple emails, which makes this particular phishing campaign that much more dangerous. The email informs recipients that their Apple ID was "updated" and includes a link users can click on "to review and update their security settings." The link, written as appleid.apple.com, redirects people to another Web page that looks strikingly similar to Apple's website, except that the phony Apple page includes advertisements at the bottom.
