Skip to Content

New Fake .Mac Email

mailI just received this at my .Mac account:

Dear user [MY USER NAME],

You have successfully updated the password of your Mac account.

If you did not authorize this change or if you need assistance with your account, please contact Mac customer service at: support@mac.com

Thank you for using Mac! The Mac Support Team

+++ Attachment: No Virus (Clean) +++ Mac Antivirus - www.mac.com


Heh. Mac Antivirus? Anybody else received these?

UPDATE: By the way, if you receive something like this and you aren't sure if it is a fake, assuming you are using Mail.app, go to View—>Message—>Raw Source. Grab a couple of the IP addresses in the header and run a Whois on them, or simply scan for them in Google. Most likely, it'll show up as not being Apple, and as being a known spammer. Train your spam filter to recognize it as spam and delete. 

I just received this at my .Mac account: Dear user [MY USER NAME], You have successfully updated the password of your Mac...
 

Add a Comment

*0 / 3000 Character Maximum

14 Comments

Filter by:
Judi Sohn

This is not new. I first started getting mail from "the Momathome Team" over a year ago. Blogged about it at the time: http://www.momathome.com/viewfromhome/2004/03/best_wishes_fro.php As noted, it's a virus. The exact strain has changed, and the text of the email has varied a bit but it's essentially the same thing...trick the victim into thinking their ISP/email administrator sent the message so they'll follow the instructions. I support a number of domains and I'm getting a lot of "Did you send me this?" email from my clients who are smart enough to ask me first before clicking on the attachment. The virus doesn't know or care that you're on a Mac. All that matters is that you have an email address and that your address was found somewhere on a victim's computer.

June 27 2005 at 5:26 AM Report abuse rate up rate down Reply
Paul Bernicchi

If the password was changed for your .Mac account, and you didn't change your password in Mail.app (assuming you don't forward to a POP3 acct), wouldn't it raise a flag or two to receive this notice? In this example, the two passwords (server/client) wouldn't match.

June 25 2005 at 10:49 AM Report abuse rate up rate down Reply
Justin

Oh you guys. Google is your friend. It's a new strain of Mytob that popped up last week. I'm a lifelong Apple user but it still surprises me how technically illiterate a lot of Mac users are... "New fake .Mac e-mail"? I mean, come on...

June 24 2005 at 8:59 AM Report abuse rate up rate down Reply
Al

You're actually a bit slow to get this, these started showing up in the wild (at least in my tech area) around a month ago. We got some frantic helpdesk calls from that one.

June 24 2005 at 7:30 AM Report abuse rate up rate down Reply
Collin

Like #5's friend, I got one of these emails, but it had a Windows executable attached. I'm not sure what they expected a Mac user to do with a Windows virus.

June 24 2005 at 3:55 AM Report abuse rate up rate down Reply
Paul

i laugh when i get emails from the tyrannous.net support team, and the tyrannous.net admin.

June 24 2005 at 2:24 AM Report abuse rate up rate down Reply
CyBeR

And to be complete, all apple.com IP addresses start with 17 and vice versa (all IP addresses that start with 17 belong to Apple.)

June 24 2005 at 1:42 AM Report abuse rate up rate down Reply
Elise

I've been getting the same thing at my domain - elise.com. "Thank you from the Elise Support Team". Several a day actually in just the last couple of weeks. What a pain.

June 23 2005 at 11:54 PM Report abuse rate up rate down Reply
Frank

My buddy got the same email and sent it to Apple. Apple informed him that it was indeed a fake and contained a WINDOWZ virus. The author was apparently too stupid to realize his virus wouldn't harm a Mac. The beauty is we are still immune to this junk...when will the PC heathens get a clue? :-)

June 23 2005 at 10:10 PM Report abuse rate up rate down Reply
byron

I got the same email on my Verizon account. I called them and they said it was a fake. Delete it! Good luck

June 23 2005 at 9:41 PM Report abuse rate up rate down Reply
Buy an ad here

Hot Apps on TUAW

Tweets

© 2012 AOL Inc. All Rights Reserved.