It was his mac.com <http://mac.com/> address, he received a phisihing email 
purporting to be from apple asking him to log into his appleID.

Regards

Sam

 <http://www.facebook.com/macambulance>  <http://www.twitter.com/macambulance>  
 <http://uk.linkedin.com/in/macambulance/>
MacAmbulance Ltd.
Providing Affordable Mac/PC Support and Web Development

Sam Mullen ACMT
+44 (0)7747778022
[email protected] <mailto:[email protected]>
www.macambulance.co.uk <http://www.macambulance.co.uk/>
MacAmbulance Ltd. is a registered company in England & Wales, registration 
number 8466597
This email is intended solely for the addressed recipients and may contain 
privileged or confidential information. If you have received this email in 
error please notify the sender and delete the email immediately.

> On 25 Aug 2014, at 13:17, Toby Leighton <[email protected]> wrote:
> 
> Hi Ranulph,
> 
> Its a nasty scam and has happened to a few relatives and family friends of 
> mine,  I hope no-one fell for it.
> 
> I was wondering, did the email account this occurred on happen to be a yahoo 
> based one?
> 
> Toby
> 
> 
> On 25 August 2014 09:19, Sam - MacAmbulance <[email protected] 
> <mailto:[email protected]>> wrote:
> Hi Ranulph
> 
> Yes that's a particularly nasty one. Try rebooting your time capsule and the 
> the sparsebundle should become available again. I think opening address book 
> (contacts in mavericks) and then entering time capsule should allow you to 
> restore your contacts. If not, there is a way to replace the files then 
> reupload the iCloud but that's better done remotely via teamviewer.
> 
> Regards
> 
> Sam
> 
> --
> MacAmbulance
> Sam Mullen
> 07747778022 <tel:07747778022>
> [email protected] <mailto:[email protected]>
> 
> On 25 Aug 2014, at 09:15, Ranulph Glanville <[email protected] 
> <mailto:[email protected]>> wrote:
> 
>> I was recently phished by a very convincing fake iCloud notification, 
>> telling me I was running out of space (likely).(Even the email address was 
>> credible.)
>> 
>> As a result many people were emailed about a trip I was supposedly paying to 
>> Manila.
>> 
>> I caught this quite fast and changed  my password. Then I found that a 
>> redirect had been placed in my mail sending copies of my messages to 
>> drwilsnook216-at-gmail.com <http://drwilsnook216-at-gmail.com/>
>> 
>> I took out the redirect, which has not been changed back since. But now I 
>> find my contacts has been emptied.
>> 
>> This seems to be a particularly unpleasant phasing attack. Has anyone else 
>> been through this? Can you suggest ways forward.
>> 
>> I have a Time Machine backup of my contacts, if I can access it. A few days 
>> ago, however, I started getting the message "The disk image "Ranulph's 
>> MacBook Air.sparsebundle" is in use. I am asked to eject it, but I can't 
>> find it. I was going to deal with this but now I'm forced to. The Time 
>> Machine problem started before the phishing. I've rebooted the computer.
>> 
>> I'd appreciate any and all help!
>> 
>> Best Wishes,
>> 
>> Ranulph
>> 
>> 
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Sussex Mac User Group" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to [email protected] 
>> <mailto:[email protected]>.
>> To post to this group, send an email to [email protected] 
>> <mailto:[email protected]>.
>> Visit this group at http://groups.google.com/group/smug 
>> <http://groups.google.com/group/smug>.
>> For more options, visit https://groups.google.com/d/optout 
>> <https://groups.google.com/d/optout>.
> 
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Sussex Mac User Group" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected] 
> <mailto:[email protected]>.
> To post to this group, send email to [email protected] 
> <mailto:[email protected]>.
> 
> Visit this group at http://groups.google.com/group/smug 
> <http://groups.google.com/group/smug>.
> For more options, visit https://groups.google.com/d/optout 
> <https://groups.google.com/d/optout>.
> 
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Sussex Mac User Group" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected] 
> <mailto:[email protected]>.
> To post to this group, send email to [email protected] 
> <mailto:[email protected]>.
> Visit this group at http://groups.google.com/group/smug 
> <http://groups.google.com/group/smug>.
> For more options, visit https://groups.google.com/d/optout 
> <https://groups.google.com/d/optout>.

-- 
You received this message because you are subscribed to the Google Groups 
"Sussex Mac User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send an email to [email protected].
Visit this group at http://groups.google.com/group/smug.
For more options, visit https://groups.google.com/d/optout.

Reply via email to