“The criminals send a text message to the phone number, saying something like ‘Apple Inc. Your iPad Air 3G 64GB Space Gray linked to [email address] has been located today at 14:14 PDT. See location: [link].’ The link leads to a phishing site that is designed to look like the login screen for iCloud.”
If you supply the credentials you use to login to iCloud, the thieves can use that info to turn off “Lost Mode” and make the stolen device usable.
“Owners who are emotionally distressed due to the loss of their iPhone or iPad may easily fall for this scam, as they may be desperate to get their device back,” Hamada wrote.
The scammers are targeting iOS device owners who speak any of a number of languages. The phishing sites are available in ten different languages: English, Spanish, Italian, French, German, Portuguese, Chinese, Russian, Vietnamese, and Indonesian.
If you lose your iPhone or iPad and receive a text like seen above, immediately contact the authorities, do not click the link and enter your iCloud login info.