You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

📰 Newsroom Update

Billie Eilish is Apple Music’s Artist of the Year for 2024. Learn more >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

reset apple id emails someone trying to hack my account

I am constatnly getting 'reset apple id' emails.

Yesterday I got a notification that someone in Taiwan had downloaded Throne Wars on another device not associated with my account - luckily a free download so I cahsnged my password straight away.

today so far I have had 7 emails about resetting my apple id.


Who do i report it to!? What can be done?

Thanks

Posted on Dec 22, 2013 7:27 AM

Reply
113 replies

Dec 26, 2013 4:31 AM in response to thomas_r.

thomas_r. wrote:


Well, since this is the iTunes for Windows forum, perhaps you have a keylogger on your Windows machine. Or perhaps your rescue e-mail address is compromised... don't you have a non-Apple rescue e-mail set up?


There are plenty of possible ways this could have happened. What's important at this point is 1) understanding the consequences, and 2) understanding how to fix it and prevent it in the future.

Your don't read very well do you?


There is no windows machine involved - in fact no MAC PC either

no iTunes either


Just a stand alone account on an idevice that account is not used anywhere else


I am on THIS forum as the symptoms and the OP's post and subsequent posts are all from the same time frame with a similiar download with no explanation as to how the account was compromised

I have yet to see a plausable answer


All I see from you is repeating standard post compromise info that was already posted by several people (including myself) before you


Contribute, don;t just repeat

Dec 26, 2013 7:04 AM in response to tcith

Your don't read very well do you?


There is no windows machine involved - in fact no MAC PC either


Are you speaking on behalf of cazyp, who originally chose to start this topic in the iTunes for Windows forum? Are you speaking on behalf of everyone else posting here? I think not.


I'm not sure what your animosity is all about. If you don't want to listen to my advice, that is your business. However, every single person reporting a problem on this topic needs to immediately take the advice that I already posted... namely, changing the Apple ID password, changing the password on any associated rescue e-mail address and enabling two-factor authentication on the Apple ID.


As for the repeated question of how this might have happened, I've given a number of possibilities. You've done your best to shoot some of them down, while completely ignoring others. The fact is, though, that unless this incident grows in scope and captures the attention of security experts with the resources to track the attack to its source, you'll never know for sure what happened. There are many techniques hackers use in cases like this.

Dec 26, 2013 7:48 AM in response to thomas_r.

Hi, OP here.

Thanks for the replies.

The emails from Apple are certainly not phishing emails and the Throne Wars' 'purchase' shows up under
my user id.

My rescue email has not been compromised - non apple email and also a stand alone government address. My PC is also secure and virus free-again governemt PC with encryption.

My apple password would have been regarded as strong..

I never download apps via a PC - only ever via iphone.

I have changed now to two factor authentication.

I mentioned this on another non phone related forum and 4 other users have had the same thing happen in the last 3 weeks.

Dec 27, 2013 2:20 AM in response to thomas_r.

thomas_r. wrote:


Your don't read very well do you?


There is no windows machine involved - in fact no MAC PC either


Are you speaking on behalf of cazyp, who originally chose to start this topic in the iTunes for Windows forum? Are you speaking on behalf of everyone else posting here? I think not.


I'm not sure what your animosity is all about. If you don't want to listen to my advice, that is your business. However, every single person reporting a problem on this topic needs to immediately take the advice that I already posted... namely, changing the Apple ID password, changing the password on any associated rescue e-mail address and enabling two-factor authentication on the Apple ID.


As for the repeated question of how this might have happened, I've given a number of possibilities. You've done your best to shoot some of them down, while completely ignoring others. The fact is, though, that unless this incident grows in scope and captures the attention of security experts with the resources to track the attack to its source, you'll never know for sure what happened. There are many techniques hackers use in cases like this.

Sorry but you have contributed little to this discussion, the advice you have given was already in the thread

and you have been condescending and assume the end user is at fault


the OP has also confirmed they are in a similar position as myself with the secure business/Govt machine with a unique address


I am now escalating this with our Apple enterprise rep as this seems to be more wide spread than a standard phishing attempt, yes the issue has grown

Dec 27, 2013 3:24 AM in response to thomas_r.

thomas_r. wrote:


It would appear I've wasted my time trying to reason with you. I honestly don't know why I tried, since you were never anything other than rude.

Not rude - practicle, logical

your condecending attitude is your issue -you do not know everything, and you need to realise not all your advice is being dispensed to tech noobs


Not here to be nice, here to get the facts, not see the same copy paste you have put on dozens of potential compromised account posts to get your points up


Fact: this is not a phish

Fact: this is not a malware attack or virus

Fact: people with very secure accounts have had material downloaded

Fact: People with no itunes account also affected


with the information gleaned I have now escelated this with Apple from an enterpise level


Thanks for your assistance

but more thanks to those who have listed their symptoms and issues

Dec 28, 2013 3:45 AM in response to cazyp

Update: my wife's laptop was clean. She doesn't use iCloud via the web, has used iTunes to download a small amount of music and doesn't use or download many apps. She doesn't have an iCloud email address.


Her account was hijacked from Taiwan and girl town and a finance app was downloaded (both free).


Her details don't appear to have escaped via an infection or email based vector, so I'm starting to wonder if there has been a breach on the apple side.


Please keep his thread updated with any responses from apple, we'll do the same.

Dec 28, 2013 3:58 AM in response to tcith

This happened to me today also. Same thing that read it was downloaded in Taiwan but this time the game was pirates journey the Caribbean.


I've changed my password, but through the apple website rather than the email link just in case, but the download history does show it as being downloaded. Hopefully we can get enough voices behind this so Apple does something about this. It's strange that they often appear to be free downloads. Maybe it's some 12 y.o. Hacker in Taiwan testing his skills.


Hope Nike fire him.

Dec 28, 2013 4:10 AM in response to Basexperience

A question for everybody on here - my wife (apple ID used only in iTunes and her iPhone) had to log into the apple website to buy an iPad: a unique event, and the iPad was shipped and arrived correctly - although they failed spectacularly to gift wrap it or actually include the AppleCare activation ID in the shipment of AppleCare).


8 days later, her iPhone starts asking for her apple ID password because someone else has changed it, as she gets an official apple email indicating this. Note that her email address wasn't changed and no others were added.


Has the apple ordering system been compromised?


Have any of you guys who do similarly tiny amounts of work with your apple IDs done anything similar near Xmas?

Dec 28, 2013 5:51 AM in response to cazyp

Can confirm I've had this happen this morning too, the game 'Pirates Journey - The Caribbean' was downloaded in Taiwan. I received a pretty much automated response from apple just advising about contacting your bank to be safe etc. I've changed password but via their site incase the email was dodgy, however the fact the app is showing in my 'purchased' list it does seem to be real.


Hope apple can give us some info

reset apple id emails someone trying to hack my account

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.