Previous 1 2 Next 28 Replies Latest reply: Feb 11, 2014 8:35 PM by Ankitaustralia
katiedamen Level 1 (0 points)

Hi

 

After a number of years with everything working beautifully, I've had two auto emails this month explaining how to reset my Apple ID password, but have not requested them at any time.  I'm concerned someone is trying to hack my account - has anyone else experienced this recently?  Should I be concerned?  I know it says at the bottom that "Most likely, someone just mistyped their email address while trying to reset their own password" but once could be a mistake, but twice in a month?  Hmmm

 

Thanks

 

Katie

  • Ocean20 Level 6 (13,570 points)

    So it begs the question,  did your password actually get changed?

  • katiedamen Level 1 (0 points)

    No, and I didn't click any link and let it expire after 3 hours...

  • Ocean20 Level 6 (13,570 points)

    Call me paranoid but if this happened to me I would make a point of changing my password to something really difficult and I would set up two step verification http://support.apple.com/kb/HT5570

  • katiedamen Level 1 (0 points)

    Thanks Ocean - have you known anyone who's Apple ID has been compromised?

  • Rosie247 Level 1 (0 points)

    Thank you so much. Was receiving the response emails at the "rescue"email address I had provided and forgot all about. All fixed now.

  • Cdnsquire Level 1 (0 points)

    I've also been receiving (started yesterday) emails indicating I wanted to reset my password-- with the link the reset it. I've just woke up to another email... As did my husband (on his account). I've now resetting password 4 times.... Do we have an answers why this is happening?

  • Xian Rinpoche Level 1 (140 points)

    I'll add my name to the list (though this is the wrong forum for this problem). I've had 3 today. 6am, 11am, 3pm. Short of just ignoring the e-mails, I'm not sure what else I can do. Password's already sufficiently strong. Heck, I don't even know which ID someone's trying to compromise. I have 3

  • ckuan Level 7 (29,553 points)

    To change your password if you are not sure if the e-mail is not a scam, DO NOT USE the link, go to https://appleid.apple.com yourself.

  • Xian Rinpoche Level 1 (140 points)

    Someone is trying to hack your account.

  • Xian Rinpoche Level 1 (140 points)

    Always good advice. Since these e-mails appear to be legit (at least mine were), it's probably time to emable two-step authentication if you haven't aready.

  • Netherscourge Level 1 (0 points)

    I've had 4 e-mails today saying the same thing. Oddly enough, they didn't go to my primary Email address, they all went to my secondary address.

     

    I didn't click anything in them, which tells me the hackers are trying to flood the password reset servers to force some sort of buffer overflow to gain access to the servers. Like how they probably did the other day with the Developer Account Servers.

     

    Apple might want to look into this ASAP.

  • Netherscourge Level 1 (0 points)

    The fact that they are requesting a reset means they don't have your Apple ID password. HOWEVER, they may have your Email Account's password and they might be trying to log into your Email so they can click the reset link themselves.

     

    From there, they could set their own password and lock you out of your own account.

     

    I would suggest changing your EMAIL account's password, not your Apple ID password. This way, they won't be able to log into your Email and click the reset link themselves.

     

    Scan your system first though - just in case they get a keylogger on their somehow.

  • Apple_User2013 Level 1 (0 points)

    Seems like it may be related to Apple's recent hack:

     

    http://www.theglobeandmail.com/technology/tech-news/apples-developer-website-hac ked-taken-offline/article13338828/

     

    This is a big issue. I have also been receiving these reset emails today (3). Since it is not coming from my regular email address or my alternate email address it means that somebody had already access to my account and is trying to reset my password because he/she doesn't have the answers to my security questions and thus can send a reset email to a third (!!!) email address that he/she would not see at any other place.

     

    DO SOMETHING APPLE.

  • TJBUSMC1973 Level 5 (7,497 points)

    Why do you say that 'hackers' flooded the Developer Account Servers?

Previous 1 2 Next