This threat involves scammers using FaceTime calls combined with caller ID spoofing and social engineering to impersonate trusted entities and steal credentials, security codes, and financial information. The article does not describe a software vulnerability, but rather a social engineering technique, so no CVSS score, affected versions, fixed version, or technical workaround are provided. IT professionals should educate users on this phishing vector and reinforce that legitimate support will never request sensitive information via unsolicited FaceTime calls.
Apple is warning iPhone and iPad users that scammers are using FaceTime calls to trick them into handing over money and account details. The company says scammers use social engineering, posing as representatives of a trusted company or entity, and contacting people by phone or other means to talk them into giving up sign-in credentials, security codes, and financial information. Apple says a caller can fake its number entirely, a trick known as spoofing, so … More → The post Scammers weaponize FaceTime to drain bank accounts appeared first on Help Net Security .