I'm so angry right now I could explode. I'm so careful about these spoof e-mails and even though some are convincing I haven't fallen for one of them in over a decade. This morning, going through my e-mails I have one saying someone tried to log in to iTunes ordering a book and if it wasn't me to click the link. Now, I'd JUST gotten one of these yesterday because I'd logged in via my iPad and they always alert you when that happens from a device you haven't used.
So, like a complete moron I ignored everything they always tell you and clicked through, where I was presented with an absolutely authentic looking Apple page to enter all my info. And like an even bigger moron, and because I'm still groggy, I actually start to do it, starting with my iTunes user name and password. I get as far as social security number when my brain finally clicked in and I stopped instantly, erased everything else and got the hell out of there - I was literally about fifteen seconds from pressing the send button. I instantly cleared my cache and my history, and am hoping that the page itself contained nothing harmful, but I don't know how to tell that. But unless they were on the page with me because I clicked it, and they were following along, they didn't get the social, but did get the address, date of birth, etc. I'm changing my Apple ID password right now.