"iCloud Storage Full" Alert: Experts Warn of Sophisticated New Phishing Scam

Authorities in Kazakhstan have issued an urgent warning regarding a new surge in cybercrime targeting smartphone users. The Committee on Legal Statistics and Special Records under the General Prosecutor's Office has identified a sophisticated phishing scheme designed to exploit iPhone users through fraudulent storage notifications.

Cybercriminals are distributing mass notifications claiming that a user’s iCloud storage is full. These fraudulent alerts are delivered via email, SMS, or third-party messaging applications. To create a sense of urgency, the messages often warn that the account will be suspended or that irreplaceable photos and personal files will be permanently deleted unless immediate action is taken.

Experts emphasize that these alerts are particularly dangerous because they meticulously replicate the visual style and branding of official Apple services. Unsuspecting users who click the provided links are redirected to phishing websites that mirror legitimate login pages. Any credentials entered—including Apple IDs, passwords, and credit card details—are instantly captured by the attackers.

While currently focused on iPhone users, specialists warn that this tactic is being adapted for other cloud-based ecosystems. Similar fraudulent campaigns have been observed impersonating services such as:

• Google Drive

• Yandex Disk

• Mail.ru Cloud

Security experts urge citizens to remain vigilant and follow these essential safety protocols:

• Verify Officially: Always check your storage status directly through the "Settings" menu on your device or via the official service app, rather than clicking external links.

• Avoid Third-Party Links: Never enter personal data or financial information on websites accessed through unsolicited messages.

• Enable MFA: Activate Two-Factor Authentication (2FA) on all sensitive accounts to provide an extra layer of security.

• Password Hygiene: Use unique, complex passwords for every service and update them regularly.

In the event of a suspected security breach, experts advise users to immediately change their passwords, terminate all active sessions, and contact their financial institutions if payment data was exposed.