Apple iPhone users are facing a new attack that targets the password reset feature. The attack involves bombarding users with notifications or multi-factor authentication (MFA) messages, prompting them to reset their password. These annoying popups appear on all Apple devices, including iPhones, iPads, and Macs.
Security researcher Brian Krebs discovered this attack and highlighted it on his blog, Krebs On Security. The purpose of these popups is not to gain access to the iPhone directly but to create panic before the attacker calls the user from a spoofed number. The attacker pretends to be from Apple support and requests the user to share a one-time password to confirm a password reset.
