An Apple account notification has been exploited in a new email phishing attack that comes with a fake iPhone purchase claim.