My devices have been hacked. What do I do?

I need some verification with the effectiveness with Two factor authentication without a passcode in this scenario.

A 'hacker' would technically be able to issue a passcode using the Lost mode. However depending on how it is done it may require the hacker to approve the credential via a trusted device (two factor) or key since it is the first the apple Id woud have been used on that machine.

And re updating passwords

It would help, I think, if Apple reminded all users to update their Apple ID with a unique password (wether its generated by the user themselves or another random generator). Perhaps the reminder could popup regularly when you open Itunes or such if email was thought risky.

Passwords now seem to be one of the most vulnerable processes in the security loop but while we still have to deal with them , assisting consumers, who mostly just want speed and ease, would benefit everyone.

I remember hearing about a recent phishing email that claimed to be from Apple notifying users that their iCloud accounts had been suspended. The email provided a log in link for users to resolve the issue. I wonder if the hacker in question was able to net some iCloud credentials during this phishing campaign and used those credentials for these attacks.

I fear that the ABC chap who's just posted will come up with a story about Apple devices

I've already seen one news story that quoted me (by link, but not by name), saying that the issue was a DNS poisoning attack. Problem is, that theory had been thoroughly debunked many hours before.

Nobody should be paying any attention to mainstream news reports on this topic at the moment. They know less than the folks paying close attention to this topic do.

Peter Sealy1 wrote:

I have cancelled iCloud accounts from each device [thus Find my Phone also] and all devices have Passcode lock active. I realise I shall need to change Apple IDs and iCloud passwords.

Just to make sure that you are aware, you cannot easily change Apple IDs if you have any App Store or iTunes Store purchases that you wish to keep. Such purchases cannot be transferred, so you would have to re-purchase them.

Even if you did completely stop using your current Apple ID and get a new one, that's overkill and may not help. We still don't know what caused this or if it's still active, so you could easily get your new Apple ID hacked. Then all the effort (and potential expense) of switching to a new Apple ID would all be for nothing. It would be better to do as has been suggested already: secure your current Apple ID, and turn off Find My iPhone until the situation is resolved.

Thomas_r. I think you'll find it is very easy to change your logon details for your apple id.

If you have another email account you can change the assoicated email address for you apple id. That is easy to do and would remove a risk if someone is holding the id.

Kjmcintosh wrote:

Thomas_r. I think you'll find it is very easy to change your logon details for your apple id.

If you have another email account you can change the assoicated email address for you apple id. That is easy to do and would remove a risk if someone is holding the id.

You certainly can change the address - unless the address is a me.com or mac.com address - but that is not the same as changing the Apple ID. That is certainly not the same as cancelling an Apple ID and getting a new one.

Do any of you that have been hacked used your iCloud password for any other services? Does your Apple ID email match the same e-mail you use for other services? Such as eBay, which was recently hacked?

If they got a bunch of passwords from eBay they could just be trying iCloud with all of the e-mail/pass combos they obtained. You'd be surprised how many people use the same e-mail/password on every site and/or service they sign up to.

thomas_r. wrote:

You certainly can change the address - unless the address is a me.com or mac.com address - but that is not the same as changing the Apple ID.

Except it is.

Your AppleID is your email address.

Your AppleID is your email address.

That's like saying that you are the clothes you are wearing. There is more to an Apple ID than the address it is associated with. Do your purchases all disappear if you change the e-mail address associated with your Apple ID? No. The address is simply the outward face of the Apple ID.

But that's all beside the point... you guys are arguing about something I never said. I never claimed you can't change the address of an Apple ID. I said that it is not a simple matter to, as Peter Sealy said, "cancel" an Apple ID and create a new one. Do you disagree with that?

thomas_r. wrote:
But that's all beside the point... you guys are arguing about something I never said. I never claimed you can't change the address of an Apple ID. I said that it is not a simple matter to, as Peter Sealy said, "cancel" an Apple ID and create a new one. Do you disagree with that?

Updating an an existing AppleID account with a new email address

vs.

starting a completely new AppleID account.

These are completely different, yes.

No I do not disagree with you. When I re-read your post I see that you were meaning not to go changing IDs e.g. get a completely new one, I was just try to point out that you can change the associated email to a different address. (Obviously as you say not if it is a me.com or a mac.com address)

On a security note, personally I set up alias for all my accounts that use a unique password on each. If you don’t have the ability then it is worth changing to an email provider that does let you do that.

I don't know how many times this has to be said. This is not an Apple security hole. If people use the same password on multiple sites, there's nothing that Apple can do about it. I just don't believe those posters who have been hacked who say that their Apple ID password is unique.

That's precisely what this prevents, you see ... :-) ...

Two-step verification is an optional security feature for your Apple ID. Two-step verification requires you to verify your identity using one of your devices before you can take any of these actions:

- Sign in to My Apple ID to manage your account

- Make an iTunes, App Store, or iBooks Store purchase from a new device

- Get Apple ID related support from Apple

Turning on two-step verification reduces the possibility of someone accessing or making unauthorized changes to your account information at My Apple ID or making purchases using your account.

Why should I use two-step verification with my Apple ID?

Your Apple ID is the key to a lot of things you do with Apple, so it's important that only you have the ability to access your account details, update your password, or make other changes to your account. Two-step verification is a feature you can use to keep your Apple ID account as secure as possible.

Please read the Apple text you posted. The 2-step verification process only prevents access to your AppleID, purchases on iTunes, etc.

IT DOES NOT protect someone who gets or hacks your password from gaining access to iCloud.com and Find My iPhone. The power to remotely erase or lock your iOS device is a great scheme to protect your investment and user data. However, in the wrong hands, we get things like this happening.

Again I think Apple needs to devise a better mouse trap for iCloud.com and/or Find My iPhone. Maybe being required to enter the recovery key given for the 2-step verification, this could stop unauthorized use (just MHO).