Beware iPhone Users: Crucial Warning on Sneaky Phishing Tactics in iMessage!

SINGAPORE – Apple iPhone owners should refrain from responding to messages from unfamiliar senders, in light of a phishing scheme aimed at those utilizing the tech giant’s iMessage application.

The Cyber Security Agency of Singapore (CSA) issued a warning on Jan 15 stating that cybercriminals have been dispatching deceptive messages to “coax users into disabling iMessage’s integrated security features”.

These messages, appearing as though they are from trustworthy sources, would direct individuals to respond, such as urging them to confirm the content by replying with “Y”.

By doing so, the iMessage’s embedded phishing protection for that message would become inactive, allowing links from unidentified senders to be accessed, resulting in cyber-security threats.

Such threats include the theft of personal data, the installation of malicious software or spyware, and potential fraud, according to CSA.

It suggested several preventive measures, with the most important being to disregard messages from unknown senders.

CSA also recommended that the “Filter Unknown Senders” option be activated, which can be done by navigating to Settings and selecting Messages, then Filter Unknown Senders.

Messages that appear suspicious and seem to be from credible sources should be confirmed through official means or the anti-scam hotline at 1799.

CSA added that users should exercise caution when links are shared via messages, no matter the sender’s identity, and report any dubious messages through ScamShield.

Furthermore, phishing messages that appear to originate from Apple should be forwarded to [email protected], along with a screenshot.

For those who have already interacted with phishing messages, CSA recommended blocking the sender and monitoring accounts for unusual activities.

If banking information or credit card details were revealed, individuals should contact their bank without delay.

CSA remarked: “If you notice any suspicious applications installed or installed apps at the request of someone else, remove them immediately.” It emphasized that passwords should be changed without hesitation, particularly if the same one is used across multiple accounts.

Finally, the agency stated that users should file a police report if they experience any financial losses.

“Being informed and cautious can aid in safeguarding your personal and financial details,” stated CSA.

Scammers have persistently utilized phishing messages to swindle victims of their funds. In December, there were at least 17 cases linked to the Land Transport Authority, with over half of them involving fraudsters using messaging platforms to deceive individuals.

In that specific scam variation, over $33,000 was lost.

• Aqil Hamzah is a reporter covering breaking news at The Straits Times, with a focus on crime and technology.

Join ST’s WhatsApp Channel to receive the latest updates and essential reads.