There's nothing in place to stop spoofing of the @icloud.com domain - so anyone with a modicum of knowledge can send you an email alerting you to suspicious activity on your account and providing a link to reset your password. Apple need to pull their finger out and lockdown the domain.
There's nothing in place to stop spoofing of the @icloud.com domain - so anyone with a modicum of knowledge can send you an email alerting you to suspicious activity on your account and providing a link to reset your password. Apple need to pull their finger out and lockdown the domain.