大量苹果用户中招！手机秒变别人的“提款机”，一场以“电商伪装”精心设计的骗局

Core Viewpoint - The article highlights a surge in reports of Apple ID theft and unauthorized transactions, with users losing amounts ranging from hundreds to thousands of yuan, indicating a significant security concern for Apple users [3][5][7]. Group 1: Incident Overview - Users on platforms like Xiaohongshu and Douyin have reported their Apple IDs being compromised, leading to unauthorized transactions totaling over 4,140 yuan in one case [3][5]. - Affected individuals have formed groups, with membership exceeding 200 within days, suggesting a widespread issue [3][5]. - Complaints regarding Apple ID theft have surged, with over 3,700 complaints recorded on the Black Cat Complaint platform as of October 29 [7]. Group 2: Methods of Fraud - Fraudsters have evolved their tactics, now posing as legitimate sellers on e-commerce platforms to gain users' trust and extract sensitive information [9][11]. - Users are often tricked into providing their Apple ID and password under the guise of needing to activate low-cost services or products [9][11]. - The fraud typically involves bypassing Apple's security measures by exploiting the lack of clear communication regarding the purpose of verification codes, leading to unauthorized payments [9][11]. Group 3: Security Concerns - The article discusses the inadequacies in Apple's security measures, particularly regarding the automatic payment features that can be exploited by fraudsters [13][21]. - Experts suggest that Apple's reliance on user discretion for security may leave vulnerabilities, as many users are unaware of the risks associated with sharing their credentials [13][21]. - The lack of a unified security standard for payment systems in China complicates the issue, making it difficult for users to seek redress after incidents of fraud [21]. Group 4: Recommendations for Users - Users are advised to never share their Apple ID and password and to be cautious of links requesting such information [19][21]. - It is recommended that users enable two-factor authentication and regularly monitor their account activity for any suspicious transactions [19][21]. - Legal experts emphasize the need for clearer responsibility and compensation frameworks for users affected by such fraud, suggesting that Apple and third-party payment providers should enhance their security measures [17][21].