iTunes compromised again...

[vaughnmr]

Looks like this time it involves Paypal:

http://www.macworld.com/article/1536...s_charges.html

http://techcrunch.com/2010/08/23/paypal-itunes-fraud/

http://technolog.msnbc.msn.com/_news...d-charges-made

Paypal is reporting a large number of accounts compromised.

[kjk]

Scammers appear to be gaining access to the accounts by sending out fake phishing e-mail messages that try to trick users into disclosing their iTunes user names and passwords. Those credentials are then used to pile on charges for music or iTunes gift codes.

Not sure how iTunes is being compromised in this case, if it is users who are being fooled by phishing schemes.

[kjk]

AllThingsD and their take on the situation http://digitaldaily.allthingsd.com/2...ullible-users/

There’s no security hole in iTunes and if you’ve been unfortunate enough to have hundreds of dollars in unauthorized purchases charged to your iTunes acount it’s likely because you’ve fallen victim to a phishing scam — a variation on the one that’s been around for years now.

[vaughnmr]

The Macworld article mentions "coupons" for iTunes discounts that "expire in 24hrs" or whatever, and Apple states that their coupons do not expire. It does sound like a phishing problem.

[Bilbo1967]

Much as I am not an Apple fan, this does not look like any kind of issue with Apple to me. It's a standard phishing scam where ITunes just happens to be the vehicle of choice this time.