Apple account change alerts abused to send phishing emails

Apple account change notification emails are being abused to deliver callback phishing lures: attackers create Apple IDs, inject phishing text into account name fields, and trigger legitimate profile-change alerts (which pass SPF/DKIM/DMARC) so the messages are sent from Apple infrastructure. Recipients are coerced into calling scam numbers where fraudsters may request remote-access installations or financial information, enabling account takeover, fund theft, or malware deployment.