Icloud account just got hacked

Furianz wrote:

This is what I get when I go to the "Bug Report" :

You must be a registered Apple Developer to file bugs via Bug Reporter.
Register at http://developer.apple.com/programs/register/ devbugs@apple.com.

That is because you are not a developer.

Is there otherway to report an iCloud issue to Apple ?

http://www.apple.com/support/contact/

Have been hacked this Saturday 06/02/2012

Why Apple try to cover the fire instead of letting its customers know about the issues so they can protect themselves ?! As obviously those problems occurs from the beginning of the year !

Or at least tell their customer iCloud is not securised, use it at your own risk !

Apple has more iCloud customers than most countries have people. If you have had unauthorized access to your iCloud account, then you need to contact Apple to get it fixed. The simple fact that this question doesn't have 132 pages means that iCloud is perfectly secure.

We have just had the same problem except it wasn't the mac.com account that was hacked it was our synched yahoo.com account (which we synched to our mac.com account at apple's security prompt several days ago when going to buy music on itunes). We downloaded Lion Sunday night and moved to iCloud Monday morning. Almost immediately it seems that not just our contacts, but every single address in our inbox, sent mail, or saved folder received a spam message from us. Looking at the time/date stamp on the mail failure reports we received back in the in box, the messages were sent from our yahoo account within 30 minutes of moving to icloud. This is the first time we have ever been hacked. We only have 1 MacBook Pro and use wifi. Downloaded iantivirus from applications, it didn't find anything in files or hard drive. This is very disappointing since we have been putting off moving to iCloud because of the other reports that Lion would erase everything on our hardrive (it did not).

Marisa C. wrote:

Downloaded iantivirus from applications, it didn't find anything in files or hard drive.

I'm convinced this isn't an OS X malware issue, but you should know that there are two different iAntivirus applications out there. The one from PCTools has not been updated in over two years so it's not much use these days. If it's the new one from Symantec, available from the AppStore, it's brand new and getting mixed reviews so far, but should at least be up-to-date.

Weird, I had my problems after I downloaded some apps to organize my contacts. As part of the process, my contacts were pushed to the cloud. Within 12 hours they were getting spam from me. I wonder if there's an issue with security when transferring to the cloud.

The spam email below is showing up in my sent folder. Do you have any ideas?

..

..

And now my mail server isn't verified??? Any advice is greatly appreciated.

TangerineTurtle wrote:

And now my mail server isn't verified??? Any advice is greatly appreciated.

smtp.mac.com is not a valid iCloud address. See iCloud: Mail server information.

This is not an Apple specific problem. This happened to my Hotmail account a few days ago. Spam emails were sent to ALL contacts in Hotmail address book. I have other contacts in my Hotmail account that are not in my address book and no spam was sent to them. It looks as though someone has access to my Hotmail address book. I did all the usual things, changed passwords etc but I dont think anyone has access to my account... just the address book. So I exported all contacts to a word file and deleted the Hotmail address book. This also happened recently to my girlfriends Gmail account.

So as we can see this is not a problem specific to iCloud mail or Apple. These spamers are somehow getting hold op peoples address book contacts.

My plan of action now is not to store my contacts anywhere online but just store them localy on my computer.

This has happened multiple times now since synching my MSN account with iCloud. I've changed my password on my MSN account and have removed all contacts from the MSN account after the first time, so I can only assume this is from iCloud? I am not sure what else to do?!

It's from iCloud.

Change your password - make it very long, number and letters, lower and upper case.

Then you'll be fine.

Contact Apple and tell them to sort it out.

Thank you.

On July 26 - Looks like my/our iCloud account has been compromised. I have a problem related to our Mac computers and use of iCloud that links all of our Apple/Mac equipment. It appears that almost every entry in our Address Book of a clearly financial nature - banks, credit cards, some on-line store accounts ( like Amazon ), etc. - has simply disappeared from our Address Books on both my MacBookPro and our iMac, from one day to the other, and only financial-related, not all the others entries.

...but curiously NOT from the Address Books on our two iPhones and one iPad, that, in principle, are linked to the computers via the iCloud??

Yes, we have changed all our usernames and passwords and checked that there has been no unauthorized activity on our accounts AND have removed all sensitive information from the Address Book. No unauthorized activity appears to have taken place, nor have any person's info disappeared.

However, we - and a Mac technician we know - are mystified as to how someone...or some hacking process...could just "cherry pick" only financial information from our Address Book.

We reach out to you to see whether anyone has any ideas, or suggestions...perhaps this has happened to someone you know, or someone knows of a Mac User Group that may be able to give info/advice.

I don't use my iCloud email address although I have one. I logged in today by going to icloud.com. Surprisingly, I had 10+ emails in my inbox including one out of office reply from my friend's work email address. The rest were delivery failure notifications from postmaster@mac.com. Every received email was from May 17, 2012. When I looked at those delivery failure emails, they all contained email addresses I recognized.

When I went to the Sent Mail folder, I had a ton of emails with content such as "Make money with an internet connection from anywhere in the world [with a link]." They were sent to email addresses that are in my iCloud Contacts. Here's the header from one of the sent emails:

To:

[REDACTED]

From:

[REDACTED]

Subject:

Re:hello!

Date:

17 2012 10:49:05

X-Mailer:

MobileMe Mail (1J25+8525)

X-Originating-IP:

[79.116.50.113]

Message-id:

[REDACTED]

Content-Type:

[REDACTED]

MIME-Version:

1.0

The originating IP address of 79.116.50.113 appears to be from Bucharest, Romania (I live in California).

Someone obviously gained access to my iCloud account and sent out spam to addresses in my iCloud Contacts. (i.e., it wasn't email spoofing) It looks like a lot of people had the exact same problem occur on or around May 17, 2012. I see a C|Net article on this as well (http://reviews.cnet.com/8301-13727_7-57436244-263/icloud-hacked-or-is-it-simply- spam/?tag=txt;title).

Was there any response from Apple regarding this issue since then?

Dear Mr. Ben Ralston,

How can I recover my apple ID? I need to because I cannot change new sim card in my iPhone, always looking for iCloud or Apple ID account. Where and how to recover it? I did all thru computer by forgot password and no link was send to my email I don't why. Can anybody help me with my problem? More than 1 year I've been problem this but I don't know what to do. I hope you can help me or by your friend also.

Thank you very much.

Best regards,

Joseph

My problem is bigger than this. my iphone 5S got snatched and till few days i m about to locate it through Find my Iphone and then after 2 weeks I got an sms on my number from some unknown number +46 70-132 78 72 and it was mentioned in that sms that your lost iphone has been found and check location on this link http://icloudlocationcheck.com/ . When I went to this link and entered my apple id and password I found it suspicious when i went to find my iphone link it was showing location somewhere in North America so i immediately logged out from that page and went to apple id page and changed my apple ID password. When i logged in again on Find my Iphone my iphone 5s has been removed from there altough it was showing in settings options on Icloud but was removed from Find my Iphone.

The Apple support was very weak too as they wont able to trace my phone although it was linked with my ICLOUD ID. They keep asking me IMEI number for which i dont have the record but I asked them that why you are showing half IMEI on my ICLOUD ID as i m logging in with my ICLOUD ID but they have no answer for it. And now after few days my Iphone 5s got completely removed from my ICLOUD ID and now there is no way i cant get it back.

My question is how that Hacker developed a link which interacts with ICLOUD interface and when i entered my user ID and Password it entered into ICLOUD database and shown my all devices. And even after my immediate alert to apple support they were unable to help me in this regard.