Skip to Content

App Store chicanery powered by iTunes account fraud

It's a shame to have to point out such underhanded behavior on a holiday weekend, but we got a heads-up from developers Alexandru Brie and Patrick Thomson that something was seriously amiss in the Books category on the App Store. As detailed on Alex's blog and in this follow-up from The Next Web, it appears that at least one Vietnamese developer (mycompany/Thuat Nguyen) has gamed the category so that 40 of the top 50 entries are all apps from their stable. It's possible that another two or three developers have tried the same thing, although to a less extraordinary degree.

As Alex points out, at least two of the reviews for these apps indicate that the apps were purchased against the buyer's will, with hacked iTunes account credentials. The ongoing MacRumors forum thread here indicates a possible spike in iTunes fraud, with major purchases being charged against unsuspecting users' accounts. Alex also notes that Apple's response team is already looking into the issue.

If you have unexpected charges on your iTunes account, be sure to notify your card issuer or bank immediately, and then send word to Apple. It may take a bit longer to get help during the long weekend.

Updates: 9to5Mac points out that the offending apps have been pulled from the store. Arnold Kim at MacRumors reminds us that compromised iTunes accounts have been reported for years, and it's not clear that the current circumstances represent a spike in malicious activity.

Categories

App Store

It's a shame to have to point out such underhanded behavior on a holiday weekend, but we got a heads-up from developers Alexandru Brie and...
 

Add a Comment

*0 / 3000 Character Maximum

11 Comments

Filter by:
Quinn Genzel

Two other companies that appear to be using unethical and/or illegal methods to game the iTunes Store ranking system are:

- Flytomap
- Egate (Egate IT Solutions Pvt Ltd)

For the past several months, it seems that every day to two, one or more of these companies' numerous, cookie-cutter apps just suddenly 'appears' in the top 20 (or even top 10!) of the Travel section in the U.S. Store. This should be impossible, with no Apple or major media featuring and often no ratings or reviews whatsoever.

I hope Apple seriously looks into this and all other examples of gaming the ranking system.

July 05 2010 at 8:18 PM Report abuse rate up rate down Reply
Xphiledgex

I didnt have my itunes accout hacked but i did have my credit card hacked, it showed on my credit history about 6 $40 itunes purchases that i couldnt find in my itunes purchase history. My credit card company fixed it no problem.

My mom also had it happen to her and they got about $1,300 of purchases before she caught it.

July 05 2010 at 10:16 AM Report abuse rate up rate down Reply
Kim

I was hijacked by this exact "seller"...Thuat Nguyen. Made four charges of over $40 in a matter of minutes. I had suspected my password got snagged when I downloaded a free app, but I am still not sure. My bank was able to rectify the situation but I'm still pretty angry with Apple for letting this slide.

July 04 2010 at 11:51 PM Report abuse rate up rate down Reply
Mike Anderson

i had my account hacked this weekend. $100 in charges for apps. already contacted apple and the bank is next. just what i needed.

July 04 2010 at 9:52 PM Report abuse rate up rate down Reply
Michael Bushnell

This kind of thing is a prime example of why you should do everything you can to protect yourself online. What I do to mitigate issues such as this is that all of my purchases from Amazon, iTunes, etc are all linked to a debit card that has no more than $100 in the account at a time (unless I need to purchase something more expensive at which time I will move $ to the account). This keeps me from getting dinged for a large amount of $ while keeping my main accounts safe. My account might get hacked, but they won't get much for their efforts as I think the debit card I mentioned has about $35 in the account right now.

July 04 2010 at 5:08 PM Report abuse rate up rate down Reply
1 reply to Michael Bushnell's comment
Max

Of course, doing this you don't get the insurance that using a credit card gives you.

July 05 2010 at 6:06 AM Report abuse rate up rate down Reply
Charli

i just checked the affected section and either Apple has shut down what was going on or the 'top' list is a shifting one and it was a momentarily glitch that has now been wiped out by 4th of July celebrants or whatever.

which makes me wonder if this was a case of faked accounts and not hacked ones. This guy and some friends could have created a big of bogus accounts using gmail emails etc and some stolen gift cards and did a massive buy of all his stuff to pad his sales figures. ANd perhaps even pad in some fake reviews

July 04 2010 at 4:14 PM Report abuse rate up rate down Reply
caballonegro

I've had occasion to use the feedback links in my receipt mails to complain about iTunes Store purchases to Apple on a couple of occasions. I was given a credit with no argument both times. If you have a problem with a purchase, you should do the same — just don't say the issue is a software bug, or you'll be referred to the developer rather than getting immediate credit.

July 04 2010 at 4:08 PM Report abuse rate up rate down Reply
Aaron

I had my iTunes account hijacked. Over $100 Dollars in charges were on my bank account. I managed to get it fixed right away but it still worries Me.

July 04 2010 at 4:02 PM Report abuse rate up rate down Reply
ButisitArt

I have been trying to draw attention to the Apple ID hijacking issue for over a year. Mine was hijacked back in June of 2009. I documented the problem on my blog in two posts. Even back then Apple said they were "looking into it" but people's accounts are still regularly hijacked.

My Apple ID was hijacked after trying to join the Apple Developers Connection. Within hours of joining, I found myself locked out of my iTunes account.

The issue isn't really iTune fraud, that's only a "symptom" of the real issue. Apple's method of changing a password is too easy. Security questions, can be all too easily figured out in this day of blogs and social media. Apple needs to go back to eMailing the registered eMail account with a link back to a page to change usernames & or passwords.

I was not the first and certainly won't be the last.

The entire story can be read in these two posts.

http://go2jo.us/c7pJOZ

http://go2jo.us/b1twSJ

July 04 2010 at 2:53 PM Report abuse rate up rate down Reply
1 reply to ButisitArt's comment
Charli

sorry dude, but if your question was guessed then you picked a bad question. As you note 'in this day of social blogging' you should always have something that you never never never tell on any blogs. And you should avoid answering those 'most common' question details.

Heck, I would even say don't sign up for those blogs with the same email address as you do your 'business' stuff. I did that. Heck I don't use my standard email address even here. I got a gmail for it. Same for twitter, facebook etc if I chose to use them.

July 04 2010 at 3:59 PM Report abuse rate up rate down Reply
Buy an ad here

Hot Apps on TUAW

Tweets

© 2012 AOL Inc. All Rights Reserved.