Massive hacking of iTunes accounts happening right now! - Page 3

vaughnmr · 07-04-2010, 06:45 PM

Quote:

Originally Posted by Moejoe

USER CP > Edit Your Details

I love it. I guess there's a "Vietnamese" rogue moderator running around here, changing things at whim.

Good luck people, I've had enough fun for one day. Off to read a book, which is what I was going to do several hours ago when I saw the hacking news. Sorry if I offended anyone, but WATCH YOUR BANK ACCOUNT.

Michael Vaughn

HarryT · 07-04-2010, 06:49 PM

Quote:

Originally Posted by vaughnmr

I love it. I guess there's a "Vietnamese" rogue moderator running around here, changing things at whim.

Good luck people, I've had enough fun for one day. Off to read a book, which is what I was going to do several hours ago when I saw the hacking news. Sorry if I offended anyone, but WATCH YOUR BANK ACCOUNT.

Michael Vaughn

Reports of potential security issues are NEVER a waste of time. Always worth passing on.

vaughnmr · 07-04-2010, 07:57 PM

Here's more news on this developing story:

•A number of iTunes accounts have been hacked from across the globe, not just the US, and used to purchase apps.
•iTunes users have reported anywhere between $100-$1400 spent using their accounts.
•The trend: buy a couple of low cost apps ($1-$3) and then one app at an extortionate price ($90+).
•We’ve also seen a reports of a free app being bought and using in app purchases to effectively send money to the app developers accounts. The app is called World War.
•Apple’s only response so far has been to ask users to change their password. We have also contacted Apple and are awaiting a response.
•Many of the apps have been purchased to specifically climb up the iTunes ranking to gain momentum in the hope that others will purchase the apps based on their high sales.
•Currently all the app purchased have been owned by Asia based developers with little information known about them. Clearly they feel being based in Asia will give them immunity to any US laws.
•This seems to have been happening over the course of the last 4 weeks, although MacRumors shows hacking on some level dating back to 2009.
•The App developers are using images from the web as their app icons
•The developers website and support links direct users to non-existent websites or landing pages.
•The initial rogue developer’s have now been removed from the app store but other unethical developers still have their accounts available in the app store – details on those to come.

Evidently this has been going on for several weeks, but the floodgates opened today, on the US holiday. There are reports from US banks reporting numerous fraud incidents.

It would be a good idea for everyone to check out their bank accounts, just in case. I absolutely hate this kind of news!

Worldwalker · 07-04-2010, 09:58 PM

Quote:

Originally Posted by vaughnmr

I love it. I guess there's a "Vietnamese" rogue moderator running around here, changing things at whim.

Good luck people, I've had enough fun for one day. Off to read a book, which is what I was going to do several hours ago when I saw the hacking news. Sorry if I offended anyone, but WATCH YOUR BANK ACCOUNT.

Michael Vaughn

Personally, I'd guess the "Groupie" title was just one of MR's standard titles based on your post count, probably 150 posts or something. If that's the case, you owe an apology to the mods -- and to the Vietnamese, for that matter.

I do find the "not" in quotes amusing, though. So you really are an Apple groupie?

HarryT · 07-05-2010, 01:08 AM

The default title is based on your "karma" score.

Worldwalker · 07-05-2010, 02:03 AM

Quote:

Originally Posted by HarryT

The default title is based on your "karma" score.

I knew it was one of them thangs.

astra · 07-05-2010, 04:45 AM

Quote:

Originally Posted by SameOldStory

Am I the only one that has a debit card just for internet purchases? I only keep 1 or 2 hundred in the account. More is added only when I'm about to make a bigger purchase. There is NO overdraft on this account.

That's why I do not use debit card for shopping online.
Only credit crad because it is protected.

murraypaul · 07-05-2010, 04:45 AM

If anyone is concerned, you can check your list of purchases through iTunes:

- Select iTunes Store
- Your email address will be in the top right, click the drop-down arrow next to it
- Select Account, log on
- Select Purchase History

You can also remove your credit card details with the Edit Payment Information option.

Moejoe · 07-05-2010, 05:03 AM

Rumours are flying about that this wasn't a phishing attack or some brute force dictionary attack, but from within the actual app store itself. Twitter is all abuzz with people who are claiming they never logged into anything but the official store, and still more people claiming that their credit cards have been used to buy products in brick and mortar stores all over America.

ardeegee · 07-05-2010, 09:37 AM

Quote:

Originally Posted by Moejoe

Twitter is all abuzz

Wouldn't Twitter be all atwitter? Buzz.com would be all abuzz.

HarryT · 07-05-2010, 10:48 AM

Quote:

Originally Posted by Moejoe

Twitter is all abuzz with people who are claiming they never logged into anything but the official store,

I've not seen anyone suggest that this is an issue with anything but the official App Store. What else has been suggested - that people were induced to log on to a phishing site and their logon details obtained that way?

ardeegee · 07-05-2010, 10:57 AM

Quote:

Originally Posted by HarryT

I've not seen anyone suggest that this is an issue with anything but the official App Store. What else has been suggested - that people were induced to log on to a phishing site and their logon details obtained that way?

When I was googling the story last night I saw this Mac fan site that is in full blown spin/denial.:

http://www.macrumors.com/2010/07/04/...y-exaggerated/

HarryT · 07-05-2010, 10:59 AM

Interesting link - thank you for posting it.

Moejoe · 07-05-2010, 11:32 AM

Quote:

Originally Posted by HarryT

I've not seen anyone suggest that this is an issue with anything but the official App Store. What else has been suggested - that people were induced to log on to a phishing site and their logon details obtained that way?

Couple of places and tweets mentioned that it might be the result of some ongoing phishing scam. Whatever it is, it's looking like it might have been happening for longer than was first thought.

Kali Yuga · 07-05-2010, 05:28 PM

Yeah, I have to generally agree with the Macrumors summary. As usual with all things Apple, it's likely to get hyped beyond all reason.

This pales in comparison to, say, someone nickel and diming $10 million from compromised credit cards, or stealing 45 million credit card numbers.

Of course this isn't a good thing, but in the grand scheme of things it's not a big deal.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Massive wave of ebook piracy?	fjtorres	News	608	11-10-2010 11:52 AM
Massive iTunes hacking/stolen money underway at this time	vaughnmr	Apple Devices	62	07-09-2010 09:12 PM
iTunes Accounts Being Hacked On Mass	Lotus Esprit	Apple Devices	0	07-04-2010 08:13 PM
Massive conversion in .prc	idum	Kindle Formats	2	11-10-2008 08:22 AM

07-04-2010, 07:57 PM	#33
vaughnmr Ebook Reader Posts: 605 Karma: 3205128 Join Date: Nov 2009 Location: Texas Device: Kindle 3, HTC Evo, HTC View	Here's more news on this developing story: •A number of iTunes accounts have been hacked from across the globe, not just the US, and used to purchase apps. •iTunes users have reported anywhere between $100-$1400 spent using their accounts. •The trend: buy a couple of low cost apps ($1-$3) and then one app at an extortionate price ($90+). •We’ve also seen a reports of a free app being bought and using in app purchases to effectively send money to the app developers accounts. The app is called World War. •Apple’s only response so far has been to ask users to change their password. We have also contacted Apple and are awaiting a response. •Many of the apps have been purchased to specifically climb up the iTunes ranking to gain momentum in the hope that others will purchase the apps based on their high sales. •Currently all the app purchased have been owned by Asia based developers with little information known about them. Clearly they feel being based in Asia will give them immunity to any US laws. •This seems to have been happening over the course of the last 4 weeks, although MacRumors shows hacking on some level dating back to 2009. •The App developers are using images from the web as their app icons •The developers website and support links direct users to non-existent websites or landing pages. •The initial rogue developer’s have now been removed from the app store but other unethical developers still have their accounts available in the app store – details on those to come. Evidently this has been going on for several weeks, but the floodgates opened today, on the US holiday. There are reports from US banks reporting numerous fraud incidents. It would be a good idea for everyone to check out their bank accounts, just in case. I absolutely hate this kind of news!

07-05-2010, 01:08 AM	#35
HarryT eBook Enthusiast Posts: 85,544 Karma: 93383099 Join Date: Nov 2006 Location: UK Device: Kindle Oasis 2, iPad Pro 10.5", iPhone 6	The default title is based on your "karma" score.

07-05-2010, 04:45 AM	#38
murraypaul Interested Bystander Posts: 3,726 Karma: 19728152 Join Date: Jun 2008 Device: Note 4, Kobo One	If anyone is concerned, you can check your list of purchases through iTunes: - Select iTunes Store - Your email address will be in the top right, click the drop-down arrow next to it - Select Account, log on - Select Purchase History You can also remove your credit card details with the Edit Payment Information option.

07-05-2010, 05:03 AM	#39
Moejoe Banned Posts: 5,100 Karma: 72193 Join Date: Feb 2009 Location: South of the Border Device: Coffin	Rumours are flying about that this wasn't a phishing attack or some brute force dictionary attack, but from within the actual app store itself. Twitter is all abuzz with people who are claiming they never logged into anything but the official store, and still more people claiming that their credit cards have been used to buy products in brick and mortar stores all over America.

07-05-2010, 10:59 AM	#43
HarryT eBook Enthusiast Posts: 85,544 Karma: 93383099 Join Date: Nov 2006 Location: UK Device: Kindle Oasis 2, iPad Pro 10.5", iPhone 6	Interesting link - thank you for posting it.

07-05-2010, 05:28 PM	#45
Kali Yuga Professional Contrarian Posts: 2,045 Karma: 3289631 Join Date: Mar 2009 Device: Kindle 4 No Touchie	Yeah, I have to generally agree with the Macrumors summary. As usual with all things Apple, it's likely to get hyped beyond all reason. This pales in comparison to, say, someone nickel and diming $10 million from compromised credit cards, or stealing 45 million credit card numbers. Of course this isn't a good thing, but in the grand scheme of things it's not a big deal.