AppStore and iTunes hacked

[GeezerButler]

Just FYI:

http://thenextweb.com/apple/2010/07/04/app-store-hacked/

 

[theheyes]

From what I can gather this is a phishing attack rather than a hacking of the iTunes store itself.

 

[b0rn2sk8]

http://www.macrumors.com/2010/07/04/reports-of-app-store-hacked-greatly-exaggerated/

Worth a read. First link makes it out in more than it is really.

 

[Kainz]

I changed my password last night, and set my account payment to 'None'. My mate had £210 worth of apps/books deducted from his account, and he longer owns an iPhone anymore.

According to him it wasn't a phishing attack as him or his wife had been on the net in quite sometime. He only noticed this last week when he checked his email to reveal an apple invoice containing a string of purchases.

 

[steveo]

http://www.engadget.com

Update: We've yet to hear from Apple proper, but we do have an update of sorts -- 9 to 5 Mac reports all the "mycompany" titles have completely vanished from the App Store. We're not sure whether Apple decided to shut down the operation or the seller pulled them himself, so continue to keep an eye on your digital pocketbook until we know for sure.

not bought any books of apple myself but still the thought of my account been hacked makes the hairs on my neck stand up

 

[Deleted member 651465]

I changed my password last night, and set my account payment to 'None'. My mate had £210 worth of apps/books deducted from his account, and he longer owns an iPhone anymore.

According to him it wasn't a phishing attack as him or his wife had been on the net in quite sometime. He only noticed this last week when he checked his email to reveal an apple invoice containing a string of purchases.

Scammers will phish your details and keep them on record until they use them - that could be days or months.

It's quite possible they entered their Apple ID and password or bought one of those apps and the developer's account was compromised.

 

[theheyes]

It's quite possible they entered their Apple ID and password or bought one of those apps and the developer's account was compromised.

Surely a compromised developer account is not going to blow the door open for anyone who purchased one of their apps? Or am I misunderstanding you?

It's either phishing/malware running on the computer (most likely) or iTunes really did get hacked (unlikely, but not impossible)

I've changed my password just as a precaution as these articles are too vague.

 

[cookiem0nster]

I have been done out of 100 quid last week by the same developer. Bank told me to deal with Apple. Apple tell me to deal with bank.

I'm seriously careful about passwords etc and don't use dodgy websites. I for one won't ever be buying an apple product again unless they sort their own mess out.

 

[NickK]

Surely a compromised developer account is not going to blow the door open for anyone who purchased one of their apps? Or am I misunderstanding you?

It's either phishing/malware running on the computer (most likely) or iTunes really did get hacked (unlikely, but not impossible)

I've changed my password just as a precaution as these articles are too vague.

No, as a developer you do not have access to the account details (or bank details) of those that buy your apps through the iTunes store. Only if the app is tied to a external bank system and the user enters their bank details into that non-apple charging system would you get this.

As a developer you get information such as number of sales, uptake over time etc but not individual data unless the app sends it back (like the old phone number harvesting that apple came down on developers over).

If you jailbreak then any application can access any part of the OS or other apps, export your entire contacts collection, key presses for trojans etc.

Majority are through trojan or pishing though.

 

[theheyes]

<snip>

Cheers for the info. I never actually thought devs would be privvy to a lot of data but as you say 3rd party payment mechanisms are something to watch out for.

I actually like the iTunes/App store precisely because it is a closed system but it obviously still pays to not be 100% trusting of what's on there even though it's been approved.

 

[SilverPenguin]

EDIT: wrong thread!

 

[iMacMart]

No, as a developer you do not have access to the account details (or bank details) of those that buy your apps through the iTunes store. Only if the app is tied to a external bank system and the user enters their bank details into that non-apple charging system would you get this.

As a developer you get information such as number of sales, uptake over time etc but not individual data unless the app sends it back (like the old phone number harvesting that apple came down on developers over).

If you jailbreak then any application can access any part of the OS or other apps, export your entire contacts collection, key presses for trojans etc.

Majority are through trojan or pishing though.

Ah ha this might explain why my brother-in-law in the north had his iTune account used to be £70 of apps and music shortly after he did a jailbreak on his handset? Silly man....