According to the Proofpoint 2017 Human Factor Report Apple ID's are the #1 target for credential theft emails. The other top targets are Microsoft Outlook and Google Drive credentials.
Having credentials such as an Apple ID, Microsoft or Google logins may allow someone to log in to not only your emails, but also to gain access to files, pictures, contact lists, device lists. Worse of all, this can also allow someone to make changes to your account and in many cases lock you out of it.
There are a few things that you can do to protect yourself from being a victim of these types of emails:
- Don't use the same password on multiple accounts.
- Use longer passwords or passphrases, especially for accounts that link to payment options (such as Amazon, iTunes, and others).
- Set up two-factor authentication on every account that you can. Visit https://twofactorauth.org/ for a listing.
If you receive an email asking for your credentials, take a sip of coffee, slow things down a little and make sure it is legit and not a phishing attack.