One of those "I'm a professional and this almost caught me" ones. He includes a couple of points at the end to avoid this kind of thing.
https://ma.tt/2026/03/gone-almost-phishin/
[snip]
What made the attack impressive was the next move: The scammers actually contacted Apple Support themselves, pretending to be me, and opened a real case claiming I’d lost my phone and needed to update my number. That generated a real case ID, and triggered real Apple emails to my inbox, properly signed, from Apple’s actual servers. These were legitimate; no filter on earth could have caught them.