New scheme employs clever technique to bypass Apple’s phishing protection

Criminals have found a way to trick Apple iMessage users into disabling the platform's phishing protection, allowing them to access potentially malicious links through a new technique that involves responding to messages and re-enabling direct message links.

Apple has integrated a phishing protection feature into iMessage.
This feature alerts users when they try to access potentially malicious and unknown websites.
By responding to a message, users are essentially confirming that the contact is legitimate, bypassing Apple's protection and allowing access to malicious content.

Criminals have discovered a new technique to trick Apple iMessage users into disabling the platform’s phishing protection. This feature is designed to prevent users from receiving and accessing potentially malicious links. In today’s smartphone-driven world, scammers often take advantage of this to deceive users. One common tactic is to use phishing addresses for various purposes, such as collecting login information or attempting to obtain payment data on behalf of a specific company.

To prevent users from accessing potentially malicious content, Apple has integrated a phishing protection feature into iMessage. This feature alerts users when they try to access potentially malicious and unknown websites. One of the protections is to disable direct message links from unknown contacts or suspicious senders. However, a recent technique has been discovered to deceive users and prompt them to re-enable these links.

Apple’s system checks messages from unknown senders in order to unlock direct access to links. However, some messages now include an instruction to respond to the message in order to confirm the action. It is through this measure that the system is bypassed.

By responding, users are essentially confirming that the contact is legitimate, and as a result, the system activates automatic links in the message. The message instructs users to respond, exit the messaging app, re-enter, and then access the link.

This method bypasses Apple’s protection, allowing victims to access malicious content. It is believed that this technique has been used in some campaigns since mid-last year.

In Portugal, this practice is not yet widely distributed, but as always, caution should be exercised when accessing suspicious links, especially those sent from unknown sources such as SMS messages.

About Our Team

Our team comprises industry insiders with extensive experience in computers, semiconductors, games, and consumer electronics. With decades of collective experience, we’re committed to delivering timely, accurate, and engaging news content to our readers.

Background Information

About Apple:

Apple Inc., known for its iconic products, was founded by Steve Jobs, Steve Wozniak, and Ronald Wayne in 1976. The company has since revolutionized the technology landscape with innovations like the Macintosh computer, iPod, iPhone, iPad, and more. for its emphasis on design, user experience, and ecosystem integration, Apple's devices and software have made a profound impact on various industries. With a commitment to quality and innovation, Apple remains a global technology leader.