Weird iTunes Prompt?!

These prompts look super suspicious. Does this indicate that this computer is infected? Or is this just an error?


Thanks!


User uploaded fileUser uploaded file

Intel iMac, Mac OS X (10.4.10)

Posted on Sep 21, 2016 7:15 AM

Reply
11 replies

Sep 21, 2016 7:37 AM in response to irnpg

I wouldn't jump to say the computer is infected. It looks like either a coding bug in iTunes or iTunes is getting bad information from the rental server. Apple has been doing a lot of stuff in the past few days and if you catch them at the wrong time an update may be happening at their end while you are trying to use a service. Since you are the only person to have reported this kind of error on the forum I suspect it is a temporary glitch.

Sep 21, 2016 7:55 AM in response to Limnos

To add a little more detail.


This came off my wife's "work" computer. She doesn't rent anything from itunes with the account that is used on that computer. So my concern is that this is a phishing attempt to get her passwd for her apple ID. Recently, on her iPhone she also got a ton of weird messages, SMS messages and itunes / icloud account prompts. She uses the same AppleID for her iPhone and the computer in question. All of this started after we retuned from Asia. We were in HK.


I'm posting the details in case this is an exploit of some kind. Hopefully, it is not.

Sep 21, 2016 9:56 AM in response to irnpg

You are seeing this window in iTunes? I believe most phishing attempts are either in the form of emails or browser pop-ups. To do that in iTunes would require hacking the iTunes code or some kind of intervention plug-in.


Given the dust that accompanies an iTunes upgrade happening alongside an OSX upgrade alongside an iOS upgrade as is happening right now I would say 99% it is some glitch from Apple's servers. The timing happens to coincide with your returning from Asia. You can always change passwords to make sure, and presumably you didn't let somebody walk into her room with a flash drive and install something on her computer.

Sep 21, 2016 10:08 AM in response to irnpg

Not anything I've ever seen. You could launch iTunes without the device connected to see it behaves differently. You could try signing out of the iTunes Store. See https://www.malwarebytes.com/antimalware/mac/ for a malware scanner, not that this sounds like typical malware, but potentially anything that can intercept web traffic could try to redirect iTunes Store requests and use them to try to steal account credentials.


tt2

Sep 21, 2016 12:10 PM in response to irnpg

That's no malware I've ever seen before, but I don't know what it might be.


One possibility is that it's some new malware. It's broken-looking enough to actually be some lame piece of malware trying to imitate an iTunes password request.


On the other hand, I've come across a few other reports of similar legit requests, with the same wording. And even for lame malware, this is just a little too broken. So another possibility is that there's something badly corrupt with her system or her copy of iTunes.


As a first step, I'd probably recommend deleting iTunes and downloading a fresh copy here:


http://www.apple.com/downloads/


Of course, you'll want to make sure she's not using a really old system that can't run the latest version of iTunes first.


In addition, check her Apple ID and see if anyone's been renting stuff on her account. If they have, she'll need to change her Apple ID password ASAP, and should also enable 2-factor authentication:


Two-factor authentication for Apple ID - Apple Support

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Weird iTunes Prompt?!

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.