Gone (Almost) Phishin’

Matt Mullenweg shares a personal near-miss with a sophisticated Apple ID phishing attack. The scam involved spamming Apple's legitimate password reset flow across all his devices, then impersonating him to Apple Support to generate a real case ID. A convincing caller posing as Apple Support then directed him to a pixel-perfect fake Apple site displaying the real case ID. He caught on when he noticed any case ID returned the same result. Key takeaways: never approve unsolicited password-reset prompts, Apple never calls you first, and always verify URLs before completing any security action.