Bogus Apple Store discount card offer attempts to steal users' identities

Filed Under: Apple, Featured, Phishing, Privacy, Spam

Spam messages have been sent out by cybercriminals claiming to reward loyal Apple customers with AU$100 (just over US $100) of credit to spend in-store if they just buy a AU$9 discount card.

100 dollars for just 9 dollars? Crumbs.. that's generous. It's a wonder that Apple makes any money with marketing campaigns like this! (Or rather it would be, if the email could be trusted).

Bogus Apple discount card email

The message body of the email reads as follows:

Dear Apple Customer,

Apple is rewarding its long-term customers. Your loyalty for our products made you eligible for buying an Apple Discount Card. With this only 9 AU$ Discount Card you will have 100 AU$ credit at any Australian Apple Store or on http://www.apple.com/au/ .

To acquire your Apple Discount Card please download and complete the attached form.

100 AU$ Credit Bonus

( You will receive your Apple Discount Card via e-mail in the following 24 hours after your payment has been made.)

Attached to the emails is a file called:

Apple Discount - Complete this form to get your discount.html

If you make the mistake of clicking on the attached file, you will be presented with a form which asks for a surprising amount of information: your name, your address, date of birth, driver's license, your mother's maiden name.

That information is bad enough to hand over to the online criminals - but it gets worse.

The form goes on to ask for your credit card details - including your security code, what password you use for Verified by Visa / Mastercard SecureCode and even (rather cheekily) your credit limit!

Of course, the emails don't really come from Apple - and users should never hand over such information. Just because an email is nicely formated and attractively presented with a friendly corporate logo and a too-good-to-be-true offer doesn't mean that it should be trusted.

Take care folks - don't let your lust for the iPhone 5 blind you to the risks of responding to unsolicited emails like this, or you could become the victim of identity theft.

, , , , ,

You might like

2 Responses to Bogus Apple Store discount card offer attempts to steal users' identities

  1. pjbfny · 717 days ago

    You know... if people would remember that old adage...

    "If it SOUNDS too good to be true..."

  2. Gareth · 717 days ago

    We have reports of this email scam from as far back as March this year. The new ones are now using the iPhone 5 as bait.

    Subject: "Apple Discount Card - Can be used to buy the NEW Iphone 5"

    I've noticed that the latest version we are getting of this in Australia has the email address as @apple.com.au. Apple never use .au, it's always .com.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley runs his own award-winning computer security blog, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.