How To Protect Your iPhone From Password Reset Attacks?

Malicious parties have been manipulating the Apple ID password reset system to attack users with iOS prompts to take over their accounts. It is also known as MFA bombing, MFA fatigue or push bombing. It’s not a new attack! However, it can be a convincing scam as it propels official iOS password reset prompts to victims. According to the latest reports, attackers using this vulnerability seem to be doing so through an Apple user’s phone number. It can bomb your iPhone and other Apple devices with 100+ MFA (multi-factor authentication) system prompts to reset your Apple ID password. In this blog, I’ll share tips on protecting against iPhone password reset attacks. Let’s get started!

How to protect against iPhone password reset attacks?

Don’t Allow Reset Password Requests

The reset password requests are a system-level alert. No doubt, it feels persuasive but try to choose “Don’t Allow” for all of them. Attackers bomb victims with hundreds of prompts, sometimes over numerous days. So, keep choosing “Don’t Allow”.  If you notice a password reset prompt on the web that may be a different phishing scam, close the page as it could lead to a malicious link.

Don’t answer phone calls

Attackers also use call spoofing to make the incoming number seem like the official Apple Support phone number. They can also verify personal information making the scam sound legitimate. So, beware! Sometimes, attackers try to get a one-time passcode from you to take over your Apple account. Decline the call. Apple emphasizes it will not make outbound calls “unless the customer requests to be contacted”. Moreover, you should not share one-time codes with anyone.

Temporarily change your phone number linked with your Apple ID

Change your phone number tied to your Apple ID. It is pertinent to mention that this will interfere with iMessage and FaceTime.

Sources claim that Apple is working on a fix so hostile parties can’t manipulate this system. However, unfortunately, the reset scam has been underscored by users for at least two years. Let’s wait and watch when the silicon giant comes with a permanent fix to such scams.

Check Out: vivo Confirmed the Launch Date of V30e