Phishing Scam Exploits Real Apple Support Tickets to Compromise Accounts

A new phishing scam is utilizing real Apple support tickets to deceive users into revealing their two-factor authentication (2FA) codes, thereby gaining access to their iCloud accounts. Security researcher Eric Moret detailed his experience with the scam, which involved receiving genuine-looking alerts and automated calls from Apple, creating a sense of urgency and confusion. This tactic highlights the effectiveness of social engineering in modern phishing attacks.