Phishing is not a new word in network machinations. That or the other way any company that actively uses Internet has faced this thing. But recently we at Intellectsoft have found a new kind of phishing which we have never known before (probably we were just lucky before).

One of our clients received a peculiar email not so long ago:

Your Apple ID, *@*.com has been temporarily Locked!

We detect unauthorized Login Attempts to your Apple ID from other IP Address. Please re-confirm your identity today or your account will be Locked due to concerns we have for the safety and integrity of the Apple Community.

To Un-Lock this account, we recommend that you go to...

There was a link to the page which looked like standard login form from the Apple website for developers. However, after even a quick look at this page you could understand that there is nothing in common between the Apple website and that web page.

Plotters didn’t care much about the similarity of the pages. Unfortunately, sometimes users do not pay much attention to such details. According to statistics victims of phishing are 3-4% of the total number of people exposed to such attempts to steal information.

Recently, attempts to steal developers accounts have increased and we strongly recommend you to be careful and keep track of who you trust the information and details of access to developers accounts. Plotters not always seek and gain financial benefits. Often such attacks are carried out in order to steal information, not money from the account of the developer. Obviously with access to the management of your applications in the AppStore plotters can spoil the reputation of your company greatly, as well as find out how your application sales are going.

Remember, all public Apple services are only on this domain — *. Apple.com, if you are offered to use link in the Uganda or Paraguay domain zone – think twice before accepting it.

If you have even the slightest suspicions about the reliability of the letter, consult with your contractor or IT department before taking any action.

The good news is that this type of phishing attacks is not widely spread yet, and the sources of such emails are promptly blocked.