Every iOS user is familiar with the popups that require an Apple ID password before completing a task; muscle memory usually takes over to type the secret code and “sign in.”
But, according to mobile developer Felix Krause, iDevice owners should think twice before handing over credentials.
In a recent blog post, Krause shines the light on a long-time loophole that turns seemingly innocuous popups into an easily replicated phishing scam.