TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Malwarebytes Labs

Real Apple notifications are being used to drive tech support scams

2026-04-21 · Read original ↗

ATT&CK techniques detected

3 predictions
T1566.003Spearphishing via Service
64%
“real apple notifications are being used to drive tech support scams scammers have found a way to abuse legitimate apple account notification emails to trick targets into calling fake tech support numbers. according to a report from bleepingcomputer, scammers create an apple accou…”
T1566.002Spearphishing Link
62%
“through a mailing list. in the copy the targets receive, the email headers still show a legitimate apple sender, and the presence of the attacker ’ s icloud address can even make it look like “ someone else ” has gained access to the account. because apple includes those user - s…”
T1586.002Email Accounts
35%
“real apple notifications are being used to drive tech support scams scammers have found a way to abuse legitimate apple account notification emails to trick targets into calling fake tech support numbers. according to a report from bleepingcomputer, scammers create an apple accou…”

Summary

Scammers have found a way to abuse legitimate Apple notification emails to trick people into calling fake tech support numbers.