Cupertino, California – Malicious actors have recently been targeting Apple users with a scam known as “MFA bombing.” This scheme exploits the Apple ID password reset system to flood unsuspecting users with iOS prompts in an attempt to gain control of their accounts. To protect against such iPhone password reset attacks, users need to be vigilant and take necessary precautions.

Reports indicate that attackers are bombarding Apple users’ devices, including iPhones, with over 100 multi-factor authentication (MFA) system prompts to reset their Apple ID passwords. This tactic aims to dupe victims into following official-looking iOS password reset prompts, potentially leading to compromised accounts.

To safeguard against iPhone password reset attacks, users are advised to decline all reset password requests by selecting “Don’t Allow” for each prompt. Attackers often inundate victims with numerous prompts over several days, so users must remain steadfast in their decision-making. Additionally, individuals should be cautious of password reset prompts on websites, as they could be part of a phishing scam.

Furthermore, users should avoid answering phone calls, even if the caller ID displays “Apple Support” or a similar identifier. Attackers may engage in call spoofing to make incoming calls appear legitimate, seeking to extract personal information or obtain one-time passcodes to hijack Apple accounts. In case of doubt, users should decline the call and independently reach out to Apple for verification.

In instances where users continue to receive prompts despite declining them, temporarily changing the phone number linked to their Apple ID could disrupt the attackers’ efforts. However, this action may impact services like iMessage and FaceTime, necessitating careful consideration before implementation.

Recent incidents underscore a potential flaw in Apple’s authentication system, prompting concerns about the frequency and aggressiveness of password reset requests. Users have reported experiencing these scams for years, with some even receiving misleading advice from Apple representatives regarding mitigation strategies.

As the company works to address the issue, users are encouraged to remain vigilant and implement the recommended protective measures. By staying informed and proactive, individuals can mitigate the risk of falling victim to iPhone password reset attacks and other malicious schemes targeting Apple users.