Has my password REALLY been compromised?
I just saw this message in my inbox:
I looked at the message details, and links within the message (without actually visiting them), and everything APPEARS to be legitimate. Typically fake/phishing messages stand out, but this one doesn’t.
The odd thing is, when I go to apples website to check my account, the only devices listed are ones I’ve actually used myself… but I can guarantee I have not used a PC running Mozilla to login to my apple account within a year.
Also, I have two factor authentication activated and any login on an unknown device should require a code which is sent to my cell phone… but I never received any such 2FA code.
So I’m left with the conclusion that the email in the image above is either fake, or the result of some glitch within Apple’s notification system.
I’ve also checked my password against several lists of known compromised passwords, and mine does not appear anywhere in any of the lists of compromised credentials.
I’m curious what others think about this. Do you think it’s legitimate, a phishing attempt, or a false positive?
I’ve had passwords compromised on other platforms in the past, and in every circumstance there have been multiple indicators of an actual compromise (email about the possible compromise, logged ip address of the attempt, 2FA code received via email or text, etc).
However in this case I’m not seeing anything else aside from the email message itself.
Anyway I’d appreciate any input others may have.