Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
The link that you showed does go to apple's website. Go the the email again, highlight the link, and press copy link instead of just copy. Then paste it back on the forums as a reply to this. If it's different than the URL that you sent earlier, its a phishing site. If it's not, it's not.

http://justdeylikekolo.com/img/Apple/index.php


That's the link I get when using the above method.

Although the piss poor grammar alone is a tell tale sign.
 
Apple needs to get on top of this ASAP. My mum just bought an iPhone, and she's still pretty novice at it. She's a prime target for this kind of attack.

She's not unique in that, either. If this isn't fixed, Apple's reputation is going to drown. Most iPhone users love their device, but not when you can't trust Apple's supposedly secure AppStore.

Again - this is most likely a PHISHING attack. It's probably the end users fault for getting phished. It was right for Apple to take down the developer's apps, but they should not be held liable for a user getting phished.
 
Most likely, your teaching did little good. I've been trying to teach various family members how to protect themselves for many years, but find that it's almost impossible to succeed because most non-technical people lack the instincts to make the judgments on what is and is not safe. Just last week I reminded my mom to be careful about opening email attachments and not 5 minutes later she was wanting to show me some video attachment that had just been forwarded to her.

I have this same exact problem. I've shown my clients how to surf the web privately and how to reset Safari, but they still continue to junk up their computers. They don't understand that you have to update your computer's firmware every once in a while, so they end up with a million updates piled up, or in the case of Windows users they forget to renew their anti-virus, or worse yet fall prey to malware thinking it is anti-virus software. This is why I recommend iPads to many of my clients. I just wish they were stand-alone devices, because it's usually the home computers and it's complexity that gets these people in trouble.

On a side note my iPhone 4 bumper has shipped and I don't even have an iPhone 4 yet. Hopefully the white one will become available for pre-order soon.
 
Again - this is most likely a PHISHING attack. It's probably the end users fault for getting phished. It was right for Apple to take down the developer's apps, but they should not be held liable for a user getting phished.
But Apple could easily prevent this, by simply checking the IP, MAC and Serial numbers of authorized hardware. So long phishing.
 
My account...

My account was compromised over three weeks ago now, and I'm still in the dark. If you've seen my posts in the other threads regarding these security breaches, you'll know that Apple has been extremely unhelpful. I finally received an email response from them yesterday, but there was no information as to what actually happened, they just said they will be able to enable my account "soon".

I have a computer engineering degree, a computer science minor, and a masters, so I'm no moron when it comes to security and the scams that are out there. All of my computer equipment is Apple down to the Airport Extreme. I say this because I'm tired of hearing from people here that it had to be Windows users, or morons. This is such an elitist mentality and it drives me nuts on these forums.

All I'm asking for is some information from Apple's customer service, the gift card money I had back, and access to my account. Should it really take this long, and if so, without any kind of communication as to why? After all of the stellar customer service I've had with Apple in the past, this is really leaving me disappointed.
 
People only put your credit card on there when you want to buy something! That's what I've been doing in the past few months so I don't have to worry.
 
Is this all in China?

I mean China is worse then Nigeria when it comes to Internet fraud.

When will smarten up and start taking action against Chinese Internet fraud and attacks.
 
That is sad if the the only way you can be secure with Apple is to do this irritating 3 step process involving gift cards

That is sad if the only way you can be secure shopping at any store is an irritating process of getting cash from your bank or using gift cards.
 
ya, stupid really. also could open up the possibility of competitors doing this to other developers to try to take them out.

arn

Not really. It is the business and product that is taken down by Apple store management and not the developer. This follows and old criminal MO of setting up a business under some suckers name, using it as a shell to hustle, taking the ill gotten gains, trash the business and let the sucker's who's name is on the incorporation papers take the heat.

I would not be surprised that this is just an experienced phisher redirecting their criminal skills at iTunes. However, they have no idea that there is a big bad, long armed sheriff in this town.

Disbursements from purchases usually take about a month to get wired to the users account. In that time, a phishing scheme is usually spotted and handled by good network security.

My take is that these iTunes phishers are not going to see a cent from any of their ill gotten gain. It is caught too soon for a disbursement to be wired to a developers account.

Good riddance of these criminals!
 
My account was compromised over three weeks ago now, and I'm still in the dark. If you've seen my posts in the other threads regarding these security breaches, you'll know that Apple has been extremely unhelpful.

...

Should it really take this long, and if so, without any kind of communication as to why? After all of the stellar customer service I've had with Apple in the past, this is really leaving me disappointed.

My take is that the powers that be at iTunes store management has the wagons circled and are pulling in all their big network security guns to see exactly how this was done.

They have your best interests in mind, they just don't want this to turn into a PR flap so they are being quite. My take on this is you are going to hear a big press announcement as soon as all the valid data is in and that it is solved and not just patched.

Comp. Eng / Comp Sci guy? Hope you do more than web pages and Java!
 
Compared to some of the online sites I buy stuff from, iTunes is the Fort Knox of online security. There is always a risk of being compromised but still, using unique and strong passwords and avoiding suspect links is a good front line defense. I check my bank often--several times a week for card activity which is probably the best way to identify problems quickly. There is always going to be a balance of risk/convenience when it comes to online shopping and for me, the convenience is worth it.
 
Bah. So far I haven't seen a single tip to prevent iTunes store fraud :rolleyes:

Ok then.

1. Use an iTunes password that cannot be guessed, and don't give it to anyone. Also don't use the iTunes password while reacting to an email that purports to be sent by Apple. Only use it within the iTunes application itself.

2. To avoid your passwords, credit card information etc. to fall prey to an attacker who attacks badly configured websites, quit your browser after using the password or credit card information. This avoids hacks where you willingly gave information to company A, and through bad programming on company A's website your browser, in fact any browser, can be convinced that it is still connected to A's website when in fact it is connected to B's website.

3. Consider using a pre-paid credit card (well, it's not really a credit card then) which would limit any financial losses to the amount of money you paid onto that card. And only add new funds to that card just before making another purchase.
 
FWIW, my account got hacked about 6 months ago, and I didn't get phished - also my account password was moderately robust... a word followed by a number combination...

After a good fight with my cc company, I got the $250 in charges reversed, and now have a combination of random letters, symbols, and numbers as my password. I will say that while the problem may not be widespread, there is some brute force attacking going on, or apples servers are getting hacked. Now that said, it would seem there are a couple of things they could do to beef up said security, such as allowing a user to identify a country of origin for their account, or even a series of MAC addresses from which to restrict access... that would probably be a lot of work, and too complex for most users to figure out though, and the problem may not be widespread enough to justify it...

Regardless, I was made whole by my cc company so no big deal - just a hassle...

Most likely is that your computer was hacked or compromised or the data coming from it was hacked or compromised.

This is much more likely than Apple's computers being hacked, especially since the number of people this has impacted so far is tiny relative to the number of itunes accounts.

You really should not bury your head in the sand. You are not the first person who said they got hacked who is essentially passing the buck instead of re-evaluating everything on their end. From their home network security, mobile and traveling security, physical security and the rest. Also how to you remember all these highly difficult passwords?
 
http://justdeylikekolo.com/img/Apple/index.php


That's the link I get when using the above method.

Although the piss poor grammar alone is a tell tale sign.

Well I am sure they will get shut down soon enough, but I am going to file with internic because their data is totally false in whois, as non-existent. Their registrar will be forced to make them fix it or take it down. Anyone who is registering this phishing sites need to be pushed out of being able to register domains in the first place.

Also pipedns.com is the one who registered the domain for them.
 
About 3 weeks ago my iTunes account was hacked. I used a strange password no dictionary word either. I awoke on a Sunday morning to see that 43.99 of airtime was bought through an in app purchase 4 times. I also got an email that my new ipod touch would be shipped Monday ( that I didn't order).

I immediately called my credit card company, cancelled the card, luckily I was able to log into the iforgot website and regained control of my account. I was able to cancel the iPod touch order (that was the easy part).

The hard part was the iTunes apps purchase, I had to wait til 11am eastern time to call apple, they took the info and said someone from iTunes would contact me in 24 hrs. I also filed a dispute through iTunes about the in app purchase. In the email I explained everything I had already done, cancelled credit card , regained control of my account, changed password....etc. Monday came and went, Tuesday I got an email from iTunes that basically said to do everything I had already done and explained in the email and I also got a little note that my account was disabled.

I emailed back about my account being disabled and informed them that my credit card company informed me that the in app purchase could not be disputed, but had to be credited back from iTunes. 24 hrs. later I got another email that stated my account was re-enabled and that iTunes didn't issue refunds and I would have to dispute it through my credit card comp.

Wed. afternoon I called my CC comp. back and told them what iTunes rep said and my CC comp. started a dispute. That evening my account was disabled again, the rep that was handling my problem was off on Thurs. and Fri. so it was Sat. before I got a response and my account re-enabled. Sunday my account was disabled again so I sent another email and come Monday I received an answer and got my account re-enabled. The reason my account was being disabled was because everytime there is a dispute with a charge on you iTunes account they automatically disable your account.

In my opinion this could've been handled quickly if there was a phone number to contact iTunes reps. The reason I say my account was hacked is, I never received an email asking for my password or anything, when I am out in public I use my mifi for internet access and my password was really unusual. I am not a windows user everything I use is Apple even down to my router.

Another thing is the guy that got into my account entered his name, address and phone number in the shipping info. My CC comp. nor Apple was interested in this info.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.