Marguerite opened an email that appeared to be from Apple. Although she doesn’t recall the details, it was very authentic looking and she never doubted it’s authenticity. She followed the instructions and though nothing of it.
But the email was a “spoof” and allowed the sender to capture Marguerite’s iCloud credentials and log in on her account and steal her address book. Using the stolen addresses the thief sent a fraudulent appeal for money to everyone in the address book.
Here is the full story: (click here)
Here is a news item about the scam: (Guardian Article)