Phishing Email Scam: Update Cloud+ Payment Information

Phishing Email Breakdown 

This phishing email uses urgency and fear of losing personal data to pressure the recipient into clicking a payment-update link. The vague “Cloud+” branding, threat of immediate deletion, and request to update payment information are strong red flags that the message is attempting to steal account or payment credentials. 

Visual Example of the Phishing Email 

Full Text from the Phishing Attempt 

YOUR CLOUD DATA IS AT IMMEDIATE RISK OF DELETION 

DEAR USER, 

We attempted to renew your Cloud+ subscription, but your payment method has expired. As a result, your personal data is now at risk of being permanently removed from Cloud. 

WHAT YOU COULD LOSE: 

• Photos and video stored in Cloud Photos 

• Contacts, calendars, and reminders 

• Notes, documents, and app data 

• Device backups (iPhone, iPad, Mac) 

FINAL REMINDER: 

Your data will be deleted if no action is taken by Today. 

To prevent data loss, please update your payment information immediately and continue enjoying seamless access to your files across all Apple devices. 

UPDATE PAYMENT & SECURE MY DATA 

Thank you for choosing Cloud. 

How to Protect Yourself? 

1. Verify the Sender: Always verify the identity of individuals claiming to be someone important, especially if the message seems out of the ordinary and asks for personal information. 
2. Avoid Clicking on Suspicious Links: Hover over or copy the link to view the complete domain name. Scammers often create URLs that resemble authentic ones by inserting subtle misspellings or extra characters. If the link looks suspicious, it’s safer to visit the official website directly or use a reputable search engine to find the correct webpage. 
3. Watch Out for Emotional Triggers: Phishing emails often use fear, sympathy, or urgency (e.g., “Your account will be closed immediately!”) to push users into acting without thinking. Pause, reevaluate the request, and confirm its legitimacy before responding. 
4. Be Mindful of Generic Greetings: Phishing emails commonly start messages with “Dear User” or “Dear Sir/Madam” rather than using your real name. Legitimate messages typically include your actual name or specific account details. 

Important Notes: 

1. Report Suspicious Messages: Reporting phishing attempts helps prevent others from falling victim to these attacks. Send suspicious messages to is-spam@mcmaster.ca for review and investigation. 
2. Educate Yourself: Learn about common phishing tactics. Consider participating in the Information Security Training Program to protect against cyber threats and secure your digital world.