iTunes Fraud - Check your account.

[Phoen1x]

I recently had my iTunes account hacked, and my bank are aware of a number of other people with the same expereince over the last week, it may be worth checking your account and at the very least changing your password.

The fraudulent transactions are labelled "Monthly Gift for XXXX" and are £10 each. I had 100 hit my account in one day before I could close the account. Thankfully my bank are being fantastic and will refund the money.

I am guessing the scam is to obtain the gift codes and sell them on for a 'discount' quickly before they are cancelled.

Apple were helpful-ish, they immediately closed my account and removed my payment details which prevents further action, but it's up to you to deal with your bank and get the money back through that route.

 

[Diggsy]

Sorry to hear that

Did you have a decent password?

Could your computer have been compromised?

Did you use it anywhere with open WiFi? Apparently that is the most common way now of people having their systems hacked, by logging on unwittingly to a hacker's system, which is posing as a genuine hotspot.

 

[Phoen1x]

Sorry to hear that

Cheers, thankfully the bank have been brilliant.

Did you have a decent password?

I think so, certainly not a terrible one. Combo of letters (capital and lower case) and numbers. Could have been better as no random characters in there, but could have been worse.

Could your computer have been compromised?

Not a chance, I live alone and iTunes is only on my PC.

Did you use it anywhere with open WiFi? Apparently that is the most common way now of people having their systems hacked, by logging on unwittingly to a hacker's system, which is posing as a genuine hotspot.

Now this made me think. It could have been my iPhone I guess, purchasing an app would send my details out of course, so anyone sniffing could get them?

 

[Diggsy]

Now this made me think. It could have been my iPhone I guess, purchasing an app would send my details out of course, so anyone sniffing could get them?

It's quite possible, moreso if you have unwittingly logged onto a hacked WiFi Hotspot. Apparently it's pretty much a doddle for anyone to set up their WiFi so that to anyone logging on, it would appear a genuine hotspot, although clearly not

Oh and with regards to your system having been compromised, I wasn't so much thinking of directly, but possibly indirectly, via a keylogger or similar?

Just giving you some possibilities, but good to know your bank are on the ball

 

[Phoen1x]

Ah yes I see what you mean, will run AV and Malware scrubbers as soon as I get home just in case.

That hotspot trick is a sneaky one, really difficult to guard against too. I have turned off auto connect on my phone, that should help as I will at least have to stop and look at the network I am connecting to.

 

[Diggsy]

Yeah, turning off auto connect is the only way to go as far as I can tell. I read something recently about the WiFi hacking, and thought the same as you, it's going to be a very difficult one to spot.