Close
Are you sure? Are you sure you want to report this comment? I understand, report it. Cancel

400k in-app iOS purchases bypassed by Russian hacker

Mon 16 Jul 2012 8:16am GMT / 4:16am EDT / 1:16am PDT
Online

New service allows iOS users to bypass Apple servers for premium content, reports huge popularity in first 24 hours

A Russian hacker has launched a service that allows users to access premium iOS content for free.

According to a report on Ars Technica, the service re-directs payment requests for in-app purchases away from Apple's servers to one operated by the hacker, Alexey V. Borodin, with no need for jail-breaking.

Ars Technica notes that use of the service grants Borodin access to Apple IDs, passwords and other sensitive data, though the hacker responded that he doesn't use, log or monitor that information.

Borodin claims that the service hosted more than 400,000 transactions in the 24 hours following the launch of In-Appstore.com, and the security crackdown appears to have started already. In its first day, two IP addresses used by the replacement DNS server were blocked, though Borodin claims to be unsure whether Apple is responsible.

An Apple representative, Natalie Harrison, responded to the threat, claiming that Apple takes App Store security "very seriously" and that an investigation is in progress.

7 Comments

Bruce Everiss
Marketing Consultant

1,692 594 0.4
The game industry, since the 1980s, has been an ongoing technology war against theft. Most people will steal if they think there is zero chance of being caught. Just look at what people have on their MP3 players for evidence.
This war is the reason that the game consoles won over the Amiga and ST.
It is the reason for the collapse of the boxed PC game market.
It is the reason that 80% of the income from mobile phone gaming is from Apple, despite Android being vastly more popular.
So Apple have a big problem that they need to fix. If developers are deprived of their income they will reallocate their time to something more profitable.

Posted:2 years ago

#1

Tom Keresztes
Programmer

655 270 0.4
Interesting that people did not consider the implications of what they are giving away. By providing the password and ID they allowed access to their payment details and addresses - the hacker just have to log in to iTunes with those details.

Edited 1 times. Last edit by Tom Keresztes on 16th July 2012 10:19am

Posted:2 years ago

#2
What others have said. Give your account details to a criminal. Do that, you frankly deserve whatever you get on the basis of your stupidity alone.

Posted:2 years ago

#3
People giving out their account information so they don't have to pay 0.99 dollars for a game they play on 300-1000 dollar device? The world has gone mad.

Posted:2 years ago

#4

Greg Wilcox
Creator, Destroy All Fanboys!

2,175 1,124 0.5
And yet another thing I predicted about six years ago. Yet more proof of how stupid people are when they get so damn cheap about the games they buy.

Posted:2 years ago

#5

Peter Dwyer
Games Designer/Developer

481 290 0.6
Er isn't this to bypass in app purchases not buying the actual games.

Posted:2 years ago

#6

Login or register to post

Take part in the GamesIndustry community

Register now