Don‘t Fall for the "Apple Security Alert" Malware Scam

As a cybersecurity professional with over a decade of experience, I‘ve seen countless scams and social engineering tactics designed to trick people into compromising their own digital security. One of the most prevalent schemes targeting Apple users in recent years is the "Apple Security Alert" scam.

You‘re browsing the web on your iPhone, iPad or MacBook when suddenly an alarming pop-up fills your screen:

WARNING: Your Apple device has been compromised! Hackers have stolen your data and infected your system with viruses. Call this number immediately for emergency tech support.

It‘s a scary message – but it‘s absolutely fake. If you see an "alert" like this, do NOT call the number or click any links. It‘s a scam, plain and simple.

Anatomy of the Apple Security Alert Scam

The goal of these scam alerts is to prey on people‘s fears and fool them into taking an action that will either give the scammer direct access to their device, or trick the victim into paying for phony security software or services.

There are a few variations of this scam, but they generally work like this:

1. The scammer sets up a malicious website rigged with JavaScript that spawns an incessant stream of pop-ups or creates a browser hijacking scenario that prevents you from navigating away.

2. The fake alerts employ scare tactics, claiming that your device and sensitive data have already been compromised. Common messages include:

   • "Your Apple device has been hacked!"
   • "Viruses have been detected on your iPhone/iPad/Mac!"
   • "Your Apple ID is being used on another device!"
   • "Suspicious activity detected in your iCloud account!"

3. The alert urges you to call a "tech support" number for immediate assistance, or to click a link to download "security software" or login to verify your account.

   • If you call, the scammer will attempt to convince you to grant them remote access to your computer and/or coerce you into paying for useless services or software.
   • If you click, you‘ll likely be directed to a phishing page designed to steal your Apple ID, or prompted to download malware masquerading as a security tool.

Make no mistake: Apple does NOT send security alerts in this manner. If your iOS or macOS device detects a real problem, you‘ll see an alert from the official, built-in security features, not from a random website. Any pop-ups like the one described above are scams.

How Widespread is this Scam?

The "Apple Security Alert" is part of a larger category of tech support scams that have been an ongoing problem for years. According to Microsoft‘s 2021 global tech support scam survey:

• 59% of consumers globally have encountered a tech support scam in the last 12 months
• 1 in 6 consumers were tricked into continuing with the scam, a 16.5% interaction rate
• Of those who continued with a scam, 74% lost money with the average financial impact being $200

While that report focused on Windows users, Apple users are squarely in the scammers‘ crosshairs as well. Traffic analysis from cybersecurity researchers shows that fake Apple security alert sites receive thousands of hits per day, and manage to trick a significant number of victims.

Examples of traffic to known Apple phishing pages. Source: Anonymous cybersecurity research firm

Why These Scams are So Effective

Even though many of these scams seem obviously fake to a trained eye, they keep tricking people for a few key reasons:

1. They exploit powerful human emotions like fear, urgency, and trust in authority. Scammers know that people are more likely to let their guard down and make irrational decisions when they feel their security is threatened.

2. The alerts hijack attention with intrusive audio/visual cues. The sudden appearance, alarming red colors, and loud sounds are hard to ignore.

3. Scammers take advantage of common misconceptions, such as the belief that Apple devices can‘t get viruses. This may lead some users to panic, thinking a real threat has broken through.

4. Many people have been conditioned to expect and accept occasional security alerts, and to follow their instructions. Scammers exploit this familiarity.

What To Do If You Encounter a Fake Apple Security Alert

If you see one of these scam pop-ups, don‘t panic. You haven‘t been hacked (yet). Here‘s what to do:

1. Do NOT call any numbers, click any links, or download anything prompted by the alert. This will almost certainly be a trap.

2. Try to close the browser window normally. On iOS, clear the app and re-open. On macOS, quit Safari completely with Command+Option+Q

3. If the alert keeps reappearing or you can‘t navigate away, force quit the browser. On iOS, swipe up from the bottom to force close the app. On macOS, press Option+Right Click on the Safari icon in the Dock and choose "Force Quit".

4. Once you‘ve closed the scam page, clear your browser data:

   • iOS: Go to Settings > Safari > Clear History and Website Data
   • macOS: In the Safari menu bar, go to History > Clear History, then select "all history"

5. Run a virus scan with reputable security software to check for any malware that may have slipped through. On Mac, I recommend tools like Malwarebytes, Avast Security, or Bitdefender. For iOS, consider a mobile security app like Lookout, McAfee, or Avira.

6. If you shared any sensitive data with the scammers, take immediate steps to secure your accounts:

   • Change your Apple ID password and any others that may have been exposed
   • Enable two-factor authentication on your Apple ID and other key accounts if not already on
   • Alert your bank or credit card issuer if you shared any financial info
   • Monitor your credit report and consider signing up for identity theft monitoring

Other Apple-Themed Scams to Watch Out For

The fake security alerts aren‘t the only Apple-related scheme out there. Other common scams include:

• Phishing emails and texts purporting to be from Apple, often claiming suspicious activity on your account. The goal is to steal your login or financial info. Double check the sender‘s email address and never click links in unsolicited messages.

• Scam iOS apps that masquerade as legitimate software or mimic real Apple apps to trick people into downloading. Only install apps from the official App Store.

• Fake call centers claiming to be Apple tech support, often asking for remote computer access or payments to fix alleged issues. Apple will never make unsolicited calls asking you to dial a support number.

• "Brushing" schemes that send unsolicited packages seemingly from Apple, using your name/address. This is to game e-commerce algorithms. You‘re not being charged, but it means scammers have your info.

If you encounter any of these, follow the same basic steps: Disengage immediately, report it to the proper authorities, and take steps to secure any accounts that may have been exposed.

Protecting Your Apple Devices from Scams and Malware

While no system is 100% foolproof, there are many steps you can take to significantly reduce your risk of falling for an Apple security scam or contracting malware on your devices:

Ultimately, protecting yourself from Apple security scams comes down to a combination of the right tools and the right mindset. With up-to-date security software, careful browsing/downloading habits, and a healthy dose of skepticism, you can avoid becoming a scammer‘s next victim.

Stay diligent out there! As cybersecurity expert Bruce Schneier says, "Security is a mindset, not a product." No matter how many security products you have, a scammer can still find ways to fool you if you let your guard down. But if you treat every unsolicited alert or message with caution, you‘ll be well equipped to stay safe.