OT: Bogus Apple ID Notification
LeatherGryphon
Posts: 12,176
I just now got a notice supposedly from Apple regarding my AppleID, saying that my mailing address had been changed on 6/11/17 (today is still 6/10/17 in the USA) so that's a clue right off the bat. A link is provided to check and says it's at a place in ".../apple.com" but when I pass my cursor over the link, the actual address appears at the bottom left of my browser window as a place in ".ru" (Russia). Soooo, I'm making the wild guess that I shouldn't click on that link, 'ya think! 
To compound matters, I tried to find the official link to Apple to manage my AppleID but it takes me to a page to login that has both account and password fields which are helpfully filled out by my Norton password manager but there is no place that I can find on the page to press to actually sent the login info and complete the login process. WTF???
So, I don't know what's going on but bewary of notices from Apple about your AppleID and for heaven's sake don't press the link in the message. Try to contact Apple through proper channels.
You have been warned.

Comments
I have been getting a lot of fake Amazon notifications including one with a title that my order had been cancelled; But going to Amazon through my regular bookmark showed the order had already been shipped.
OK, so a little more checking and apparently this type of phishing attempt is not uncommon for Apple subscribers. But I'm still trying to find a way to legitimately get into my Apple account and change my password. Apparently they prefer that you login via one of their applications instead of directly through a browser. So I go in through my iTunes app on my main computer and get to "my account" and see a link to "Edit" my account's AppleID info and that takes me to a page that displays my AppleID and password but at the top is a notification message that says (approximately) "Your session has timed out for security", and I can find no way to actually edit my account password. Is this just a current hiccup with their app or am I not understanding something. I'll try tomorrow with I'm bright eyed and bushy tailed as a ragged old dog can get.
I used to get frequent notifications that there was a security problem with my Apple ID and I haven't even got an Apple ID! The trick of having a link that looks like an address but actually goes somewhere else is used all the time in these sort of emails.
I don't think there is any real connection with Apple, these scam artists just use the names of large companies and sent their emails to any address they can get hold of. If they chose a company like Apple they will get to a lot of people who do have Apple accounts but they don't know who these will be. I've had messages saying I need to check the details on my account for most of the major high street banks in this country, and I only have an account with one of them.
appleid.apple.com?
I got one of those phishing email too, but since I don't have an Apple account I laughed and deleted it - it came into one of my disposible accounts which I would never use if I had an Apple account.
General rule of internetting:
If you get any type of unsolicited email about any account you have regarding passwords or contact info or asking you to verify info. Do not click on the links, even if it looks legit.
Open a new web browser tab, manualy go to the site in question, log in form there, and check if anything needs updating
And inform the company of the phishing scam, so they are aware of it. I almost always can tell if it's a scam, simply because the emails almost never use my name.
For Apple phishing (like the one I got today), forward with headers (on Apple Mail, use Message > Forward As Attachment) to [email protected] .
See this link to identify an email purporting to be from Apple:
Identify and report phishing emails and other suspicious messages - Apple Support
See this link to identify phony purchases claimed to be made in your Apple account:
https://support.apple.com/en-us/HT201382
See this link to report fraud to Apple:
https://www.apple.com/legal/more-resources/phishing/