Was MR hacked?

[countryside]

In a thread that I started, linked here, a disturbing story was shared. How could someone see a post on MR and find the phone number of the anonymous account? I ask this at risk of sounding crazy, but do you know if phone number information on MR was breached?

Someone called this user and asked them about a niche issue that only a small number of users have discussed... and said they saw MR poster talking about it on MR.

Apple said to contact authorities. Obviously, there are other scenarios beyond an MR database being breached, but curious if others have experienced this.

cc: @MacGiver

 

[hg.wells]

Does Mac Rumors even ask for your phone number? I can’t see anywhere in the account settings where it could be added.

 

[Apple_Robert]

I am guessing the person who called him was account phishing. On rare occasions, Tim Cook's office has contacted someone first from the internet, albeit the internet person provided contact information in the post in case Apple saw the post when tagged.

I am also guessing the forum member has shown personal information of some kind elsewhere on the internet and the caller was able to do a little research and try a call that worked. Phone numbers are not posted in user accounts.

 

[countryside]

Does Mac Rumors even ask for your phone number? I can’t see anywhere in the account settings where it could be added.

I wrongly assumed we used it for 2FA. It looks like MR doesn't...

I am guessing the person who called him was account phishing. On rare occasions, Tim Cook's office has contacted someone first from the internet, albeit the internet person provided contact information in the post in case Apple saw the post when tagged.

I guess so. Very strange/creepy/interesting the "phisher" asked about the exact issue we were talking about... an issue that I have only seen discussed on TWO threads.

 

[Apple_Robert]

I wrongly assumed we used it for 2FA. It looks like MR doesn't...


I guess so. Very strange/creepy/interesting the "phisher" asked about the exact issue we were talking about... an issue that I have only seen discussed on TWO threads.

The Phisher or someone working with him was reading the site and looking for a victim. I am sure people are scanning what we post all the time looking for an opportunity to take advantage.

MR has the option to use 2FA but, it is not phone based. It is app based.

 

[0128672]

And Apple Support would never call a customer based on an MR forum post. Apple Support doesn’t cold call its customers.

Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support

Use these tips to avoid social engineering schemes and learn what to do if you receive suspicious emails, phone calls, or other messages.

support.apple.com

 

[AutomaticApple]

In a thread that I started, linked here, a disturbing story was shared. How could someone see a post on MR and find the phone number of the anonymous account? I ask this at risk of sounding crazy, but do you know if phone number information on MR was breached?

Someone called this user and asked them about a niche issue that only a small number of users have discussed... and said they saw MR poster talking about it on MR.

Apple said to contact authorities. Obviously, there are other scenarios beyond an MR database being breached, but curious if others have experienced this.

cc: @MacGiver

Well, MacRumors was hacked back in late 2013.

MacRumors Forums: Security Leak

Yesterday, the MacRumors Forums were targeted and hacked in a similar manner to the Ubuntu forums in July. We sincerely apologize for the intrusion,...

www.macrumors.com

 

[arn]

We haven't been hacked (recently). But yeah... we don't have @MacGiver 's phone number, so couldn't be us anyway. I haven't gone through his post history, unless he posted it himself somewhere, or elsewhere with the same username.

Maybe google your phone number and "MacGiver" and see if it hits anything.

arn

 

[MacGiver]

We haven't been hacked (recently). But yeah... we don't have @MacGiver 's phone number, so couldn't be us anyway. I haven't gone through his post history, unless he posted it himself somewhere, or elsewhere with the same username.

Maybe google your phone number and "MacGiver" and see if it hits anything.

I confirm I never shared my phone number on MR or any other social media. I have googled my user name and phone number and nothing is found.

I have found this on the from Reddit

https://www.reddit.com/r/iOSProgramming/comments/9eom6c

But also found this from Macfiness site

The latest scam is from… AppleCare Tech Support??? - MacFinesse

Two different scams have become very prevalent in the last two weeks, with scammers escalating their tactics, and both of the scams seemingly involve Apple or AppleCare Tech Support. Both are bogus and both use social engineering to trick and scare you into doing some thing they want you to do...

macfinesse.com

 

[MacGiver]

Today I received another call the same person who left a voice mail on my iPhone. Seems like it is a real support person. That is really odd anyway.

 

[Runs For Fun]

Today I received another call the same person who left a voice mail on my iPhone. Seems like it is a real support person. I just after received the email attached. That is really odd anyway.

I would take a close look at that email to make sure it’s legit. Check the headers.

 

[AutomaticApple]

Today I received another call the same person who left a voice mail on my iPhone. Seems like it is a real support person. That is really odd anyway.

You can never be sure though.

 

[Apple_Robert]

Today I received another call the same person who left a voice mail on my iPhone. Seems like it is a real support person. That is really odd anyway.

If you didn't file an official case (and the case numbers should match) with Apple, do not reply to that email.

 

[MacGiver]

If doing something similar is how Apple identified you though, it's a bit creepy. Did you contact them (or log a bug report) and forget?

No I never contacted them. Just left a comment on MC and they told me this why the called me.

 

[MacGiver]

If you didn't file an official case (and the case numbers should match) with Apple, do not reply to that email.

I believe I will just delete all these email ans do not pay attention to their calls and such…

 

[Apple_Robert]

I believe I will just delete all these email ans do not pay attention to their calls and such…

Good idea.

Even if the guy is actually from Apple, what he is doing is not protocol and is very, very strange behavior.

 

[0128672]

You can also use the instructions I posted above from Apple to forward the email to reportphishing@apple.com. You did read the support article, yes?

 

[Apple_Robert]

You can also use the instructions I posted above from Apple to forward the email to reportphishing@apple.com. You did read the support article, yes?

WildSky,

Don't you know us men don't read directions? We also make fun of people who call tech support.