{"id":51621,"date":"2016-07-28T21:25:30","date_gmt":"2016-07-29T04:25:30","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=51621"},"modified":"2025-05-27T20:06:55","modified_gmt":"2025-05-28T03:06:55","slug":"active-ios-smishing-campaign-stealing-apple-credentials","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/","title":{"rendered":"Active iOS Smishing Campaign Stealing Apple Credentials"},"content":{"rendered":"<p style=\"text-align: justify;\">McAfee Mobile Research recently found an active phishing campaign targeting iOS users via SMS messages. The message\u00a0tells users that their\u00a0Apple accounts have\u00a0been temporarily locked to trick them into accessing a phishing site and steal the real Apple credentials. Here is an example of an SMS message from this campaign:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-51629\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_SMS-300x179.png\" alt=\"iOS_Smishing_SMS\" width=\"300\" height=\"179\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_SMS-300x179.png 300w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_SMS.png 750w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/p>\n<p style=\"text-align: justify;\">The message pretends to be an email using familiar fields such as FRM, SUBJ, and MSG. According to bit.ly, the shortened URL in the preceding message was created on July 27 and points to a PHP file in a hacked website:<\/p>\n<p style=\"text-align: justify;\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-51627\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_link1_done.png\" alt=\"iOS_Smishing_link1_done\" width=\"298\" height=\"117\" \/><br \/>\nThe PHP file redirects victims\u00a0to another hacked website with a web page that pretends to be from Apple and tells users that their\u00a0Apple accounts have been temporarily locked and that they need to \u201csafely\u201d re-confirm the account information by clicking on a link that appears\u00a0to go to Apple:<\/p>\n<p style=\"text-align: justify;\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-51626 size-full\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_FakeSite.png\" alt=\"iOS_Smishing_FakeSite\" width=\"750\" height=\"816\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_FakeSite.png 750w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_FakeSite-276x300.png 276w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><br \/>\nThe fake website also threatens victims\u00a0with the closure of their accounts if the \u201cverification\u201d is not done before a specific date (in this case July 28, which confirms that the campaign is active). The bogus notice\u00a0includes a message in red asking readers to mark the message as \u201cNot Spam,\u201d suggesting that this site was initially prepared to target users via email. Users who click on the link are\u00a0redirected to an &#8220;Apple&#8221; phishing site that will steal the credentials:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-51628 size-full\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_Phishing.png\" alt=\"iOS_Smishing_Phishing\" width=\"750\" height=\"631\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_Phishing.png 750w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_Phishing-300x252.png 300w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><br \/>\nAccording to bit.ly, the shortened link in the smishing message has been clicked more than 1,700 times, mostly on July 27:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-51622 size-full\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_clicks1.png\" alt=\"iOS_Smishing_clicks1\" width=\"1177\" height=\"269\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks1.png 1177w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks1-300x69.png 300w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks1-768x176.png 768w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks1-1024x234.png 1024w\" sizes=\"auto, (max-width: 1177px) 100vw, 1177px\" \/><br \/>\nThe origin of most of the clicks is from the United States:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-51623 size-full\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_clicks1_countries.png\" alt=\"iOS_Smishing_clicks1_countries\" width=\"591\" height=\"455\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks1_countries.png 591w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks1_countries-300x231.png 300w\" sizes=\"auto, (max-width: 591px) 100vw, 591px\" \/><\/p>\n<p>Another active campaign started on July 22 with the following SMS:<br \/>\nFRM:apps<br \/>\nSUBJ:New message<br \/>\nMSG:i&gt;\u00bfUrgent!! &lt;phishing_url&gt;<br \/>\nIn this case, the campaign has archived almost 6,000 clicks, most of them on July 22:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-51624 size-full\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_clicks2.png\" alt=\"iOS_Smishing_clicks2\" width=\"1188\" height=\"394\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks2.png 1188w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks2-300x99.png 300w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks2-768x255.png 768w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks2-1024x340.png 1024w\" sizes=\"auto, (max-width: 1188px) 100vw, 1188px\" \/><br \/>\nAgain, most of the clicks are from United States:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-51625 size-full\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_clicks2_countries.png\" alt=\"iOS_Smishing_clicks2_countries\" width=\"596\" height=\"450\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks2_countries.png 596w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_clicks2_countries-300x227.png 300w\" sizes=\"auto, (max-width: 596px) 100vw, 596px\" \/><br \/>\nPrevious campaigns (no longer active) offered\u00a0more specific messages about the suspension of an Apple account but always used the same email template (FRM, SUBJ, and MSG):<\/p>\n<p>FRM:&lt;number&gt;@text.att.net<br \/>\nSUBJ: New<br \/>\nMSG:i&gt;\u00bfYour iTunes has been suspended until this process is completed &lt;phishing_url&gt;<\/p>\n<p style=\"text-align: justify;\">Most of the time cybercriminals do not need advanced exploits and attacks to gain unauthorized access to systems or accounts. A phishing website and message can be enough to obtain credentials from victims and get full access to accounts.<\/p>\n<h2>Research and Precautions<\/h2>\n<p style=\"text-align: justify;\">How can you protect yourself from this type of attack? In general be suspicious of any unwanted SMS messages from unknown numbers and think before you click. Do some research and save yourself a lot of grief.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>McAfee Mobile Research recently found an active phishing campaign targeting iOS users via SMS messages. The message\u00a0tells users that their\u00a0Apple&#8230;<\/p>\n","protected":false},"author":462,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[442],"tags":[76,214],"coauthors":[1104],"class_list":["post-51621","post","type-post","status-publish","format-standard","hentry","category-mcafee-labs","tag-cybercrime","tag-mobile-security1"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Active iOS Smishing Campaign Stealing Apple Credentials | McAfee Blog<\/title>\n<meta name=\"description\" content=\"McAfee Mobile Research recently found an active phishing campaign targeting iOS users via SMS messages. The message\u00a0tells users that their\u00a0Apple accounts\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Active iOS Smishing Campaign Stealing Apple Credentials | McAfee Blog\" \/>\n<meta property=\"og:description\" content=\"McAfee Mobile Research recently found an active phishing campaign targeting iOS users via SMS messages. The message\u00a0tells users that their\u00a0Apple accounts\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/\" \/>\n<meta property=\"og:site_name\" content=\"McAfee Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/McAfee\/\" \/>\n<meta property=\"article:published_time\" content=\"2016-07-29T04:25:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-28T03:06:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_SMS.png\" \/>\n\t<meta property=\"og:image:width\" content=\"750\" \/>\n\t<meta property=\"og:image:height\" content=\"447\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Carlos Castillo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@carlosacastillo\" \/>\n<meta name=\"twitter:site\" content=\"@McAfee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Carlos Castillo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/\"},\"author\":{\"name\":\"Carlos Castillo\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/894ee4a790607d505a13c24955d2edbe\"},\"headline\":\"Active iOS Smishing Campaign Stealing Apple Credentials\",\"datePublished\":\"2016-07-29T04:25:30+00:00\",\"dateModified\":\"2025-05-28T03:06:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/\"},\"wordCount\":441,\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_SMS-300x179.png\",\"keywords\":[\"cybercrime\",\"mobile security\"],\"articleSection\":[\"McAfee Labs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/\",\"name\":\"Active iOS Smishing Campaign Stealing Apple Credentials | McAfee Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_SMS-300x179.png\",\"datePublished\":\"2016-07-29T04:25:30+00:00\",\"dateModified\":\"2025-05-28T03:06:55+00:00\",\"description\":\"McAfee Mobile Research recently found an active phishing campaign targeting iOS users via SMS messages. The message\u00a0tells users that their\u00a0Apple accounts\",\"breadcrumb\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#primaryimage\",\"url\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_SMS-300x179.png\",\"contentUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_SMS-300x179.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Other Blogs\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"McAfee Labs\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Active iOS Smishing Campaign Stealing Apple Credentials\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"name\":\"McAfee Blog\",\"description\":\"Internet Security News\",\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\",\"name\":\"McAfee\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"width\":1286,\"height\":336,\"caption\":\"McAfee\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/McAfee\/\",\"https:\/\/x.com\/McAfee\",\"https:\/\/www.linkedin.com\/company\/mcafee\/\",\"https:\/\/www.youtube.com\/McAfee\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/894ee4a790607d505a13c24955d2edbe\",\"name\":\"Carlos Castillo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/729f5b9d2761341175762c5f10652607\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Carlos-Castillo-96x96.jpg\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Carlos-Castillo-96x96.jpg\",\"caption\":\"Carlos Castillo\"},\"description\":\"Carlos Castillo specializes in the analysis of mobile threats and Android malware. Castillo performs static and dynamic analysis of suspicious applications to support McAfee\u2019s Mobile Security for Android product. He is the author of the McAfee-published white paper, \\\"Android Malware Past, Present, and Future,\u201d and wrote the \u201cHacking Android\\\" section of the book, \\\"Hacking Exposed 7: Network Security Secrets &amp; Solutions.\u201d As a recognized mobile malware researcher, Castillo has presented at several security industry events, including 8.8 Computer Security Conference and Segurinfo, a leading information security conference in South America. Prior to his position at McAfee, Castillo performed security compliance audits for the Superintendencia Financiera of Colombia, and worked at security startup Easy Solutions Inc., where he conducted penetration tests on web applications, helped shut down phishing and malicious websites, supported security and network appliances, performed functional software testing, and assisted in research and development related to anti-electronic fraud. Castillo joined the world of malware research when he won ESET Latin America\u2019s Best Antivirus Research contest with a paper titled, \u201cSexy View: The Beginning of Mobile Botnets.\u201d Castillo holds a degree in systems engineering from the Universidad Javeriana in Bogot\u00e1, Colombia.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/carlosacastillo\/\",\"https:\/\/x.com\/carlosacastillo\"],\"url\":\"https:\/\/www.mcafee.com\/blogs\/author\/carlos-castillo\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Active iOS Smishing Campaign Stealing Apple Credentials | McAfee Blog","description":"McAfee Mobile Research recently found an active phishing campaign targeting iOS users via SMS messages. The message\u00a0tells users that their\u00a0Apple accounts","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Active iOS Smishing Campaign Stealing Apple Credentials | McAfee Blog","og_description":"McAfee Mobile Research recently found an active phishing campaign targeting iOS users via SMS messages. The message\u00a0tells users that their\u00a0Apple accounts","og_url":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/","og_site_name":"McAfee Blog","article_publisher":"https:\/\/www.facebook.com\/McAfee\/","article_published_time":"2016-07-29T04:25:30+00:00","article_modified_time":"2025-05-28T03:06:55+00:00","og_image":[{"width":750,"height":447,"url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/iOS_Smishing_SMS.png","type":"image\/png"}],"author":"Carlos Castillo","twitter_card":"summary_large_image","twitter_creator":"@carlosacastillo","twitter_site":"@McAfee","twitter_misc":{"Written by":"Carlos Castillo","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#article","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/"},"author":{"name":"Carlos Castillo","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/894ee4a790607d505a13c24955d2edbe"},"headline":"Active iOS Smishing Campaign Stealing Apple Credentials","datePublished":"2016-07-29T04:25:30+00:00","dateModified":"2025-05-28T03:06:55+00:00","mainEntityOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/"},"wordCount":441,"publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#primaryimage"},"thumbnailUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_SMS-300x179.png","keywords":["cybercrime","mobile security"],"articleSection":["McAfee Labs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/","url":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/","name":"Active iOS Smishing Campaign Stealing Apple Credentials | McAfee Blog","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#primaryimage"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#primaryimage"},"thumbnailUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_SMS-300x179.png","datePublished":"2016-07-29T04:25:30+00:00","dateModified":"2025-05-28T03:06:55+00:00","description":"McAfee Mobile Research recently found an active phishing campaign targeting iOS users via SMS messages. The message\u00a0tells users that their\u00a0Apple accounts","breadcrumb":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#primaryimage","url":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_SMS-300x179.png","contentUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/iOS_Smishing_SMS-300x179.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/active-ios-smishing-campaign-stealing-apple-credentials\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.mcafee.com\/blogs\/"},{"@type":"ListItem","position":2,"name":"Other Blogs","item":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/"},{"@type":"ListItem","position":3,"name":"McAfee Labs","item":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/"},{"@type":"ListItem","position":4,"name":"Active iOS Smishing Campaign Stealing Apple Credentials"}]},{"@type":"WebSite","@id":"https:\/\/www.mcafee.com\/blogs\/#website","url":"https:\/\/www.mcafee.com\/blogs\/","name":"McAfee Blog","description":"Internet Security News","publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.mcafee.com\/blogs\/#organization","name":"McAfee","url":"https:\/\/www.mcafee.com\/blogs\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","width":1286,"height":336,"caption":"McAfee"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/McAfee\/","https:\/\/x.com\/McAfee","https:\/\/www.linkedin.com\/company\/mcafee\/","https:\/\/www.youtube.com\/McAfee"]},{"@type":"Person","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/894ee4a790607d505a13c24955d2edbe","name":"Carlos Castillo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/729f5b9d2761341175762c5f10652607","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Carlos-Castillo-96x96.jpg","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Carlos-Castillo-96x96.jpg","caption":"Carlos Castillo"},"description":"Carlos Castillo specializes in the analysis of mobile threats and Android malware. Castillo performs static and dynamic analysis of suspicious applications to support McAfee\u2019s Mobile Security for Android product. He is the author of the McAfee-published white paper, \"Android Malware Past, Present, and Future,\u201d and wrote the \u201cHacking Android\" section of the book, \"Hacking Exposed 7: Network Security Secrets &amp; Solutions.\u201d As a recognized mobile malware researcher, Castillo has presented at several security industry events, including 8.8 Computer Security Conference and Segurinfo, a leading information security conference in South America. Prior to his position at McAfee, Castillo performed security compliance audits for the Superintendencia Financiera of Colombia, and worked at security startup Easy Solutions Inc., where he conducted penetration tests on web applications, helped shut down phishing and malicious websites, supported security and network appliances, performed functional software testing, and assisted in research and development related to anti-electronic fraud. Castillo joined the world of malware research when he won ESET Latin America\u2019s Best Antivirus Research contest with a paper titled, \u201cSexy View: The Beginning of Mobile Botnets.\u201d Castillo holds a degree in systems engineering from the Universidad Javeriana in Bogot\u00e1, Colombia.","sameAs":["https:\/\/www.linkedin.com\/in\/carlosacastillo\/","https:\/\/x.com\/carlosacastillo"],"url":"https:\/\/www.mcafee.com\/blogs\/author\/carlos-castillo\/"}]}},"_links":{"self":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/51621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/users\/462"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/comments?post=51621"}],"version-history":[{"count":2,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/51621\/revisions"}],"predecessor-version":[{"id":214487,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/51621\/revisions\/214487"}],"wp:attachment":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media?parent=51621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/categories?post=51621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/tags?post=51621"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/coauthors?post=51621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}