Phishing email in sent folder - as if I sent it!

Question

Level 1

15 points

Phishing email in sent folder - as if I sent it!

One of my non-iCloud email addresses received a phishing email about an iPhone XS offer that seemed spoofed to come from my iCloud email address.

I’ve experienced this before, and know that little can be done about it, but that it’s mostly harmless as the spoofer doesn’t have access to my emails.

I was shocked to check my iCloud Sent Messages folder and find the same email there, as it would be if it was actually sent from that address.

I immediately changed my Apple ID password, and am quite concerned that someone got access to my emails.

How is this possible? What more can I do to protect myself? Has anyone else experienced this?

Posted on Aug 26, 2019 11:53 PM

Reply

Answer 1

Best reply

adstastic Author

Level 1

15 points

Aug 27, 2019 9:13 AM in response to moore123456

Try looking at the Headers of the emails being sent and received.

iCloud: https://support.apple.com/kb/PH2640?locale=en_US

Gmail: https://support.google.com/mail/answer/29436?hl=en

See if you can find out which client (iOS, macOS) sent the email, and any other useful information such as the originating IP address.

I hope this thread gets some attention from Apple representatives soon!

Reply

Answer 2

adstastic Author

Level 1

15 points

Aug 27, 2019 8:34 AM in response to moore123456

No further emails (that I know of) but the recipient Google account's calendar was also phished. This has been reported by others on Google forums (see here: hhttps://support.google.com/calendar/thread/12665854?hl=en)

I'm not sure these are related, as the Google calendar phishing seems just like standard phishing, whilst the phishing email appearing to be sent by me seems much more serious.

I also changed my Apple ID password as soon as I discovered this.

Reply

Answer 3

Aug 27, 2019 8:21 AM in response to adstastic

This same exact thing happened to me - I immediatelly changed my password but then two more emails (sent to my gmail from icloud) still occurred. any update??

Reply

Answer 4

Aug 27, 2019 8:49 AM in response to adstastic

ugh, i changed my icloud password twice and just changed my google account password.

another email was just sent though.

Reply

Phishing email in sent folder - as if I sent it!

Similar questions