A new phishing campaign is targeting Apple users with fraudulent messages claiming that their iCloud data—including photos and videos—will soon be deleted unless immediate action is taken. The scam is designed to create urgency and trick users into revealing sensitive personal and financial information.
The attack typically involves emails or messages that appear to come from Apple, warning users that their iCloud storage is full or their account has been blocked. These messages often include alarming statements such as “your photos will be deleted” or “your data will be wiped on [date],” along with a button prompting users to upgrade storage or update payment details.
Clicking on these links redirects users to fake websites that closely mimic Apple’s official pages. Victims who enter their login credentials, banking details, or payment information risk having their data stolen, which can then be used for financial fraud or sold on the dark web.
Cybersecurity experts warn that the scam is particularly effective because it mirrors legitimate iCloud notifications that users may already receive. Attackers also use follow-up emails with escalating threats to pressure victims into acting quickly without verifying authenticity.
Common red flags include suspicious sender email addresses, unusual domain names, grammatical errors, and urgent language demanding immediate action. In many cases, the messages are not sent from official Apple domains and may contain subtle inconsistencies.
Users are strongly advised not to click on any links or download attachments from such messages. Instead, they should check their iCloud status directly through device settings or Apple’s official website. Security guidelines also recommend enabling two-factor authentication and reporting suspicious emails to Apple to prevent further attacks.
