San Francisco, California – Malicious parties have recently been exploiting the Apple ID password reset system to bombard iPhone users with prompts aimed at taking over their accounts. This form of attack, known as “MFA bombing,” can be convincing as it inundates victims with official iOS password reset requests.
Reports indicate that attackers are targeting Apple users by bombarding their devices with over 100 multi-factor authentication prompts in an attempt to reset their Apple ID passwords. This vulnerability allows scammers to manipulate the system using a victim’s phone number, leading to a flood of reset prompts on iPhones and other Apple devices.
To protect against these iPhone password reset attacks, users are advised to decline all system-level password reset requests. Despite the convincing nature of these alerts, users should consistently choose “Don’t Allow” to prevent falling victim to the scam. Additionally, users should avoid answering phone calls, even if the caller ID displays “Apple Support,” as scammers may attempt to extract personal information to gain access to accounts.
Changing the phone number associated with the Apple ID temporarily can also help mitigate the onslaught of prompts. However, users should be aware that this action may disrupt iMessage and FaceTime functionality on their devices.
According to security experts, there appears to be a flaw in the Apple ID password reset system, leading to a high volume of reset requests within a short timeframe. Users have voiced concerns about this scam for at least two years, prompting calls for Apple to address this issue. While some users have tried enabling the Recovery Key feature to stop the password reset notifications, it has been found ineffective in preventing the prompts.
This ongoing security threat highlights the importance of remaining vigilant and cautious when dealing with password reset requests and phone calls, especially those claiming to be from official sources. By taking proactive measures and staying informed about potential scams, iPhone users can better safeguard their personal information and accounts from malicious attacks.