cazyp

Q: reset apple id emails someone trying to hack my account

I am constatnly getting 'reset apple id' emails.

Yesterday I got a notification that someone in Taiwan had downloaded Throne Wars on another device not associated with my account - luckily a free download so I cahsnged my password straight away.

today so far I have had 7 emails about resetting my apple id.

 

Who do i report it to!? What can be done?

Thanks

Posted on Dec 22, 2013 7:27 AM

Close

Q: reset apple id emails someone trying to hack my account

  • All replies
  • Helpful answers

first Previous Page 7 of 8 last Next
  • by fsardas,

    fsardas fsardas Jan 3, 2014 3:58 PM in response to cakefrosting
    Level 1 (0 points)
    Jan 3, 2014 3:58 PM in response to cakefrosting

    Thanks cakefrosting. I don't think you're being paranoid. What I did was:

     

    - went into the credit card section and did not answer any of security questions in order to confirm my card so apple won't let me purchase anything until I do so. I'd rather wait a while than being surprised again.

  • by Basexperience,

    Basexperience Basexperience Jan 4, 2014 1:47 AM in response to fsardas
    Level 1 (20 points)
    Jan 4, 2014 1:47 AM in response to fsardas

    No - you need to

     

    1. Reset you Apple ID password - make sure it's a good complex password

    2. Reset passwords on any associated email accounts

    3. Enable 2-factor auth on the Apple ID account.

     

    Do this as soon as possible! Your Apple ID security has been compromised!

  • by Basexperience,

    Basexperience Basexperience Jan 4, 2014 2:02 AM in response to cakefrosting
    Level 1 (20 points)
    Jan 4, 2014 2:02 AM in response to cakefrosting

    You're not being paranoid cakefrosting - change password on the Apple ID account, any associated emails accounts, and enable 2-factor auth if you can.

     

    The continuing expansion of this thread is worrying and heartening at the same time - if we can keep it rolling and expanding then we can track how big this is, and hopefully send a message to the silent behemoth that is apple.

     

    Their handling of this on an individual basis seems to be pretty good - I've seen them deactivate apple IDs, set everything straight, including financial refunds, then reactivate the Apple ID.

     

    But with no idea of what's behind this, we don't know if these cases are all the result of concentrated and focussed brute force password cracking in Taiwan, or if there are leaks somewhere (server compromises or otherwise).

     

    All we can do in the support community is keep this thread expanding - find anyone else and get them to post, if you can. I thought this would tail off, but it seems to keep going...

  • by Ironbarkbob,

    Ironbarkbob Ironbarkbob Jan 4, 2014 5:08 PM in response to fsardas
    Level 1 (0 points)
    Jan 4, 2014 5:08 PM in response to fsardas

    I have also been compromised. January 5.

    Du Du racing and Slots wold adventure my credits count was charged $4.00 each.

    Both from Taiwan.

     

    Changed password as recommended.

  • by cazyp,

    cazyp cazyp Jan 5, 2014 2:17 AM in response to Ironbarkbob
    Level 1 (1 points)
    Jan 5, 2014 2:17 AM in response to Ironbarkbob

    Ok here's a thought..

    Does anyone here use twitter or Facebook? Over the last few days i've noticed when viewing certain
    news stories via twitter/facebook links my iphone has been auto redirecting to the App Store on my phone to a free game 'Kingdoms.'

     

    I wonder if this is related..?

  • by gnosisistic,

    gnosisistic gnosisistic Jan 5, 2014 10:35 AM in response to cazyp
    Level 1 (0 points)
    Jan 5, 2014 10:35 AM in response to cazyp

    a family member of mine was also just affected by download activity from Taiwan using their apple ID.  getting them to reset their password now!!

  • by gnosisistic,

    gnosisistic gnosisistic Jan 5, 2014 10:50 AM in response to gnosisistic
    Level 1 (0 points)
    Jan 5, 2014 10:50 AM in response to gnosisistic

    just walked them through resetting password and enabled 2-step auth, but there is a 3day waiting period...

  • by Masterbab,

    Masterbab Masterbab Jan 6, 2014 8:46 AM in response to thomas_r.
    Level 1 (0 points)
    Jan 6, 2014 8:46 AM in response to thomas_r.

    i have exactly the same problem ! juste before Xmas, a hack coming from taiwan. i change the password but it happend a second time today ! this time i change security question, password, and email......its feel weird so much people seems having the same problem from taiwan these days......

  • by xkibbee,

    xkibbee xkibbee Jan 7, 2014 12:44 AM in response to Masterbab
    Level 1 (0 points)
    Jan 7, 2014 12:44 AM in response to Masterbab

    Same issue here. I am based in France and noticed that my Apple ID password didn't work anymore before Christmas. I just reset it and didn't think much about it.

    Then on January 6th I received a mail from Apple saying that the app " l'app du soir : le bon plan gratuit tous les soirs" was downloaded with my account from Taiwan.

    The app is free so no big damage right now.

    I changed my Apple ID password immediately again but am not confident that it helps in the long run.

  • by Basexperience,

    Basexperience Basexperience Jan 7, 2014 12:58 AM in response to cazyp
    Level 1 (20 points)
    Jan 7, 2014 12:58 AM in response to cazyp

    Regarding use of facebook and twitter - I'd be surprised if anyone here isn't using at least one of those... I've had web pages redirect to apps in the App Store a couple of times, I'd be very surprised if it's possible to compromise an Apple ID this way - more likely, that app supports a lot of in game purchases, which is also why it's been downloaded from taiwan on a couple of occasions...

  • by applepicks,

    applepicks applepicks Jan 8, 2014 8:12 AM in response to cazyp
    Level 1 (0 points)
    Jan 8, 2014 8:12 AM in response to cazyp

    Just stumbled across this thread. I'm having the same problem with my apple account. Got notification on the 5th that Clash of Three Kingdoms had been downloaded thorugh my account. I don't own any apple devices so I didn't even know I had an account, although it's possible I've used ITunes in the past and set it up then. Anyway, I logged in and reset my password on the 5th. Today I get another email saying that Fantasy Slots has been downloaded from the App store. Just changed my password for the second time. I wish I could just delete the account altogether.

  • by Basexperience,

    Basexperience Basexperience Jan 8, 2014 8:20 AM in response to applepicks
    Level 1 (20 points)
    Jan 8, 2014 8:20 AM in response to applepicks

    It's important you change the passwords on any email accounts associated with that Apple ID as well - it could be that the email account is compromised, and they're using it to access the Apple ID and change the password.

     

    Even though you don't use the account it may be a good idea to enable 2-factor auth - you can specify a mobile number to SMS the security codes to. This way your account shouldn't be able to be compromised again, I think (or it's at least another hurdle for them to get over).

  • by applepicks,

    applepicks applepicks Jan 8, 2014 8:30 AM in response to Basexperience
    Level 1 (0 points)
    Jan 8, 2014 8:30 AM in response to Basexperience

    How do I do the 2-factor auth?

  • by Basexperience,

    Basexperience Basexperience Jan 8, 2014 8:33 AM in response to applepicks
    Level 1 (20 points)
    Jan 8, 2014 8:33 AM in response to applepicks

    http://support.apple.com/kb/ht5570 should give you the details

  • by applepicks,

    applepicks applepicks Jan 8, 2014 8:42 AM in response to Basexperience
    Level 1 (0 points)
    Jan 8, 2014 8:42 AM in response to Basexperience

    I'm in a 3 day time out (waiting period) for the 2 factor auth. We'll see what happens. Thanks for your help!

first Previous Page 7 of 8 last Next