Security experts at Sophos spotted a new phishing campaign targeting iCloud users. The attackers are interested in the victims financial data. Bad actors are using emails that inform iCloud users about suspicious login attempts related their account. The emails invite victims to repudiate an alleged Order made from their account, a social engineering technique that could be very effective. The email includes a link to a phishing page managed by the cyber criminals, which is cancellation form that is ‘available onlyin the US”]
Source: https://securityaffairs.co/wordpress/33313/cyber-crime/phishing-campaign-icloud-users.html