stereocourier

Q: iTunes store account hacked

I'm posting this just to share my story and get reactions. It's a little detailed but I thought worth sharing.

On November 23, 2010 I purchased a single song from the iTunes store for .99. I used store credit that I had from a gift card I received last year. It was the first purchase I had made since July 2010.

On November 25, 2010 I received a receipt for 2 more separate orders to my account. These were for over $50 in iPhones apps. Here's a sampling of some of the purchases:

1 eREAD isoshu, v1.5, Seller: ChengDu YueTong Internet Information Co. Ltd (17+)
2 Plants vs. Zombies, v1.3, Seller: PopCap Games, Inc. (iDP)
3 Monkey Island 2 Special Edition: LeChuck's Revenge, v1.1, Seller: Lucasfilm International Services Inc.
4 Asphalt 5, v1.2.6, Seller: Gameloft (9+)
5 Let's Golf!® 2, v1.0.1, Seller: Gameloft (4+)
6 Frames & FX for Photos, v2.5.1, Seller: Imikimi, LLC (12+)
7 Stenches: A Zombie Tale of Trenches, v1.0.1, Seller: Thunder Game Works (9+)

I do not have a credit card linked to my account, so these were made using my store credit.

I have only 1 computer authorized for my account (my personal home computer). I live alone and no one else touches my Powerbook but me. I also DO NOT own an iPhone, so I would have no interest in apps.

After I saw these bizarre purchases, I checked my account. I noticed 2 strange things: My account information had changed: My street address was correct, but city, state and zip had changed to: Towson, MD 21286-7840. I have never lived in Maryland. Also, I noticed that my password recovery answer had changed to "Murray" in response to a question about my mother's maiden name. That's decidedly NOT my mother's maiden name. Also, my birthdate had changed to an incorrect month and day.

I immediately changed my password and my recovery question/answer challenge.

I reported problems on all of these purchases and also contacted iTunes Account Support by e-mail.

Within 24 hours I received an e-mail from "Vicki" at iTunes Customer Support. She wrote:

"When reviewing over your account "name@domain.net" and the two reported orders, it shows that the content purchased within them was acquired from the computer that is currently authorized for your iTunes account. So I strongly advise that you do consult with those in your household regarding the purchases made, and the charges that resulted from those purchases."

Further:

"I have gone and reversed the charges for the two orders....You will see a store credit in three to five business days....Please note that this is a one-time exception, as the iTunes Store Terms and Conditions state that all sales are final."

I am pleased that Apple is refunding my store credit and replied so quickly.

However, it is simply impossible that these purchases were made from my computer. Again, my Powerbook is the only computer I have ever authorized to access my account, and I am the only person with access to it.

I am not sure how this happened. Any thoughts or similar experiences?

Powerbook G4, Mac OS X (10.5.8)

Posted on Nov 28, 2010 3:45 PM

Close

Q: iTunes store account hacked

  • All replies
  • Helpful answers

first Previous Page 23 of 131 last Next
  • by Brad Schurman,

    Brad Schurman Brad Schurman May 20, 2011 1:43 PM in response to bluemc
    Level 1 (135 points)
    May 20, 2011 1:43 PM in response to bluemc

    Me, ignorant? Speaking from experience? Again, FAIL.

    Try again, better yet spare us all and DONT. Otherwise stick with 'relevant' information; keeping in mind hackers seem to be freely making modified account access, information, sometimes account names, sometimes removed CC info after abusing it. They have worked the system and know how to maximize damage, deflect 'solutions' and cover tracks for the most part.

    Lots of the hacker-altered situations mentioned above, victims are virtually powerless until Apple takes action to deauthorize, eradicate or reset the account no matter what the victim tries.

     

    He didnt SAY EXPLICITLY he had more than one machine authorized did he? Read his post again.

    If he has only ONE machine shown as authorized, there is only ONE reason the following MIGHT not work:

     

    To deauthorize a computer

    1. Open iTunes.
    2. Choose Store > Deauthorize Computer (In earlier versions of iTunes, access this option from the Advanced menu).
    3. Select "Deauthorize Computer for Apple Account" and enter your Apple ID and password.

     

    http://support.apple.com/kb/HT1420

     

    ...Yes, the normal single machine deauthorization step for a single authorization.

     

    If he cant access the single authorization to deactivate? Hacker altered something to prevent that. WAITING FOR APPLE TO ACT is the fastest and most efficient way than driving around a city dragging four other friends' machines into someone elses problem. That does NOT save time unless those other 4 units are side by side in an office. Especially if the hacker altered his account to the state he cannot even deauthorize one... there would be no way for him to 'fake authorize' four of his friends' units then, would he?

     

    If more than one account and even that doesnt work? Why not? What if other authorized machines 2 to 5 are in some unknown country, NOOB? Unless lusid manages to hunt down the squatter and deauthorize those machines on location, lusid is hooped, and they will remain AUTHORIZED in SPITE of your pretend 'solution'.   Victim-deauthorizations have been failing because of this tactic already; Apple-originated deauthorizations seem to not fail.

    Relying on a backdoor "can only use once a year" approach is flimsy at best.

    Again, this is all dependant on whether Apple's faulty accounting allowed a hacker to alter any personal access, security, and location information or not... where upon it totally falls back into Apple's lap to deauthorize, shut down or 'reboot' the account. As it seems the majority of accounts are getting this kind of hacker treatment, unfortunately the quickest way DOES rely solely on Apple: the company that steadfastly still maintains it was my fault, even after resolution. Ugh.

     

    Authorize using the correct account name

    The items you are trying to play might have been purchased using a different iTunes Store account.

    http://support.apple.com/kb/TS1389

    Hard to do for those who have had subtle changes made on them by hacker isnt it? Like the inclusion middle initial one guy didnt actually have that suddenly showed up in profile that stymied his normal security log in? Even some support docs dont cover hacker tactics, so this wont work ALL the time.

     

    I have no problem at all quoting actual support docs Apple has to certify and stand behind as being 'support solutions'. You should try that sometime.

    "Some phone/email help guy told me" doesnt fly any farther than I can spit as far as Im concerned. Its still Apple's problem and none of their support docs suggest we have to take such time-wasting, ridiculous efforts jumping through hoops to merely deauthorize a computer. That is YOUR support pal's suggestion only, not an authorized, routine Apple 'time and effort saving trick for deauthorizing a (hacked) computer/account", and it is supposed to be used only for those with 5 machines authorized.

    If you were trying to 'skin a cat' a different way, perhaps omitting your cut/paste words "trick", "simple", 'save time' and putting a personal CAVEAT would be something to keep in mind next time. India Apple Support proved themselves wrong more than enough times for my liking, and with this post so have you.

    The fact STILL remains there undeniably is a hacking problem at Apple (who is totally denying it), where the response is not much more than reading off an ineffective script in response; they may or may not be 'winning the hacker war' that they are stubbornly refusing to admit even exists (how Area 51 of them); and the onus/blame seems to almost always be foisted onto the victims/clients.

    This is absolutely poor business practice. Apple used to have a track record of great response and success overcoming all manner of problems from overheating batteries to failed iMac screens, but this problem seems to grow the more they deny it exists.

    I also expect MUCH MUCH more from them in solutions and guidance, NOT unfounded accusations of failure on my part. And by all means it shouldnt matter if I have been running Macs since 1989 or if someone else bought their first last week, all clients should have been given more respect than what has been shown in the thousands of reported cases mentioned this year.

    Livid does not begin to describe my frustration with witch doctor procedures or Apple failure.

  • by jennyfromconneaut lake,

    jennyfromconneaut lake jennyfromconneaut lake May 23, 2011 6:13 AM in response to DominikFromAustria
    Level 1 (0 points)
    May 23, 2011 6:13 AM in response to DominikFromAustria

    same thing happened to me from kingdomConquest. was charged $46.63 and now $3.17

  • by thebytedoc,

    thebytedoc thebytedoc May 23, 2011 7:44 AM in response to stereocourier
    Level 1 (0 points)
    May 23, 2011 7:44 AM in response to stereocourier

    I have a question for anyone reading this...has anyone been hacked by this twice? If so what was Apples response?  Also, has anyone that has requested a refund been denied?

      In answer to my own question, I have only been hacked once and was given a full refund, of course with the caveat that it was a 'one time deal'.

      Appreciate the feed back and sincerely hope Apple gets a clue on this one, I am extremely disappointed with them. They almost had me ready to get a Mac (after 30 years solidly in the PC/Microsoft space!).

  • by Mellikins,

    Mellikins Mellikins May 23, 2011 9:34 PM in response to stereocourier
    Level 1 (0 points)
    May 23, 2011 9:34 PM in response to stereocourier

    im currently living in new zealand and the same thing has happened to me, Kingdom conquest has effectively 'stolen' $54.99 worth of itunes dollars off of my account.. how do i get my money back??

  • by melissafromoak forest,

    melissafromoak forest melissafromoak forest May 24, 2011 7:59 AM in response to stereocourier
    Level 1 (0 points)
    May 24, 2011 7:59 AM in response to stereocourier

    I got a response yesterday from iTunes support letting me know that I will be reimbursed fully and that my account had been deactivated and I have to reactivate it by giving them some information. I did so and my account was reactivated later that same day. iTunes support requested that I change my password to prevent future problems, which I fail to see how helpful that would be since I never did anything in the first place for the hackers to get my password information, so the password isnt be the problem. To prevent a future problems I will NOT add my credit card information to my account and I will use my iTunes gift card as soon as I redeem it inorder to insure a hacker does not spend it first.

     

    Good luck to those still trying to navigate iTunes support I hope you get your refund!

  • by kastr01,

    kastr01 kastr01 May 25, 2011 2:54 PM in response to Mellikins
    Level 1 (0 points)
    May 25, 2011 2:54 PM in response to Mellikins

    Exact same thing happened to me!!!!!!! What did you do land up doing?

  • by kaitlin_from_earth,

    kaitlin_from_earth kaitlin_from_earth May 25, 2011 8:59 PM in response to stereocourier
    Level 1 (0 points)
    May 25, 2011 8:59 PM in response to stereocourier

    Add me to the list $35 stolen by kingdomconquest no response from apple beyond the we got your complaint automatic email.

  • by brennokbob,

    brennokbob brennokbob May 27, 2011 2:17 PM in response to kaitlin_from_earth
    Level 1 (0 points)
    May 27, 2011 2:17 PM in response to kaitlin_from_earth

    Just got wiped out by Kamagames for some in app chip purchases for poker which I don't even play. It says I bought them last night which is amazing since I have never launched one of their apps.

     

    The only thing I did differently yesterday on my iPad was to update all apps from the iPad rather than the PC. It did prompt me for my password, but I just assumed this was normal since I usually update from my PC. Maybe this is how they are doing it?

  • by cmb13,

    cmb13 cmb13 May 28, 2011 7:40 AM in response to stereocourier
    Level 1 (0 points)
    May 28, 2011 7:40 AM in response to stereocourier

    Add me fellows.  Just lost $59 to "GAMEISLIVE".  I don't even have any of their apps.  Awaiting a response from Apple.  It's been 3 days.  I already changed my passoword.

     

    It's then newest trend in stealing!  I never use a credit card for itunes anymore, only a gift card, but they were wiped out within a day of entering the codes.

  • by Jake74030,

    Jake74030 Jake74030 May 28, 2011 10:43 AM in response to stereocourier
    Level 1 (0 points)
    May 28, 2011 10:43 AM in response to stereocourier

    Add me too. I was charged $60.95 from a silly game named KingdomConquest, and a in-app purchase of $35.00 of chips for "Kamagames". Apple's response was useless, due that I have 1 week (and counting) since my report.

    And, for so, my CC info was deleted, city changed to Towson, MD, secret answer changed. I have changed my password, but still, is not helpful, and, now, I need to pay almost $100 by something odd! How they can do it!

  • by lorifromharrisburg,

    lorifromharrisburg lorifromharrisburg May 29, 2011 12:13 PM in response to Brad Schurman
    Level 1 (0 points)
    May 29, 2011 12:13 PM in response to Brad Schurman

    Got hit yesterday..wiped out a remaining of a $25 gift card.  I removed credit card from account but beware, I actually had a heads up text at 4:11 pm ET from my Yahoo email associated with Itunes account that someone tried to retrieve my password using a secret question.  I changed everything on that account, then early this morning daughter informed me there wasn't any money left on the account.  When I checkd, it was all over the map, downloads at 4:09 ET - Simpsons to disco. 

     

    Just sent Apple request for refund today.  Waiting to see what happens.  Of course all passwords, notifications have been changed but you might want to think about the email account affiliated with Itunes as well and updating that, just in case. 

     

    I was checking how to de-authorize pc's since I only have 4 and will try links above for safey.  I think I know which pc's they are, crashed, one literally smashed,  and daughter's pc she used until it ran out of memory,  but I need to get every one off except for mine.

     

    I do not have an Ipad, but a slightly creeped out that someone also tried to hack email account.

  • by zerg1234,

    zerg1234 zerg1234 May 31, 2011 9:24 AM in response to brennokbob
    Level 1 (0 points)
    May 31, 2011 9:24 AM in response to brennokbob

    They do prompt you for a password when you update your apps via ipod... although I think maybe that's also how the hackers are getting that information.  Can add me to this list though.  I was updating some apps on Sunday night and find today that my account has been drained for KingdomConquest points.

  • by Chris CA,

    Chris CA Chris CA May 31, 2011 9:49 AM in response to zerg1234
    Level 9 (79,692 points)
    iTunes
    May 31, 2011 9:49 AM in response to zerg1234

    zerg1234 wrote:

     

    They do prompt you for a password when you update your apps via ipod... although I think maybe that's also how the hackers are getting that information.

    It will only ask for a password if you have apps you have already purchased, on the iPod/iPad, so they would already have to have a copy of the purchased app from your account.

  • by connorfromtucson,

    connorfromtucson connorfromtucson May 31, 2011 12:21 PM in response to stereocourier
    Level 1 (0 points)
    May 31, 2011 12:21 PM in response to stereocourier

    I have the same exact problem as everyone in this thread. I had about $30 in iTunes credit from gift cards, and on May 29, $28.76 of it was spent on KingdomConquest in-app purchases. I attempted calling technical support, but I was basically ignored as, according to the man I spoke with, the entire iTunes support team can only be reached online, and NEVER by phone. If this is true, which I hope it isn't, that means that we have absolutely no power over whether our claims are actually read and dealt with. I'm getting incredibly ticked off at this powerlessness over the people hacking my account and stealing my money. I've never liked Apple, but they're just giving me more reasons to hate them now.

  • by carboncanyon,

    carboncanyon carboncanyon May 31, 2011 11:15 PM in response to stereocourier
    Level 1 (15 points)
    May 31, 2011 11:15 PM in response to stereocourier

    This problem has been going on for 4 years, from what I've found. I wonder what it's going to take for Apple to put some decent security in.

     

    < Edited by Host >

first Previous Page 23 of 131 last Next