Share

Related Links

  • Apple iTunes
  • Elsevier Ltd is not responsible for the content of external websites.

Related Stories

  • Hackers disrupt YouTube, iTunes and Wikipedia on US Independence Day
    Hacker groups hit several top websites on US Independence Day, but it remains unclear if the malicious efforts were co-ordinated or not, according to US reports.
  • The iPod and iPhone could be used for hacking
    Applications on the Apple iTunes website are arguably what makes the iPhone so popular in mobile phone circles, but a growing number of users are unlocking (jailbreaking) their iPhones, for the simple reason that it opens up the mobile to third-party applications. This means the iPod and iPhone could be used for hacking.
  • Weekly Brief - August 3 2009
    In this week's information security briefs: AVG flags up iTunes as malware; hackers score $219 000 from city; Microsoft's sandboxing criticised, and more...
  • Apple tightens security after rogue developer is banned from App Store
    Apple has banned a Vietnam-based developer from its online applications store for manipulating sales figures to boost his ranking.
  • Apple patches multiple security holes in iOS 5
    Apple has issued an update to iOS 5 - its operating system for smartphones and tablet computers – solving a number of problems, including battery-draining issues and a 'feature’ that could be used by cybercriminals to sneak compromised apps on to the iTunes app portal.

Top 5 Stories

News

Apple iTunes security allegedly compromised

05 July 2010

Reports have been coming in overnight that a growing number of iTunes' accounts have been hacked, with unauthorised charges appearing on user accounts, as well as a 'take-over' of a number of apps on the iTunes store apparently by a Vietnamese software developer.

The Next Web newswire says that the incident began yesterday morning with an app developer apparently hacking iTunes users accounts and purchasing their own apps using those accounts – thus pushing the apps to the top of the iTunes charts.

"As the story has developed it appears to be far more widespread than just that one particular developer and his apps. We've received a number of reports of accounts being hacked and used to make purchases on iTunes", said the newswire.

Infosecurity understands that the scope of the iTunes problems appears to be limited to the service's US online store.

The Next Web, meanwhile, says that "the rankings in the books category of the US iTunes store features 40 out of 50 apps by the same app developer, Thuat Nguyen."

"What's more concerning is that it seems individuals iTunes accounts have been hacked to make mass purchases of that one developer's apps", said the newswire.

"One look at a screenshot of some twitter search results above or this MacRumors thread should ring alarm bells - there is a problem", the newswire added.

The Yottafire social networking reporting portal, meanwhile, says a Vietnamese hacker – possibly a developer – "somehow got access to the 'books' section of the iTunes app store."

According to a posting by Casey on the portal, the screen shot of the books sections of app store shows some odd names like Conan 1, Conan 2, Conan 7 etc.

Casey went on to say that Apple must now kick out the developer out of the app store and refund the people who have bought the books from the app store today.

Infosecurity notes that overnight reports on the Twitter microblogging service saw users urging other users to change their password on iTunes, as well as removing their card details from the service.

This article is featured in:
Internet and Network Security • Malware and Hardware Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.