400k in-app iOS purchases bypassed by Russian hacker

New service allows iOS users to bypass Apple servers for premium content, reports huge popularity in first 24 hours

A Russian hacker has launched a service that allows users to access premium iOS content for free.

According to a report on Ars Technica, the service re-directs payment requests for in-app purchases away from Apple's servers to one operated by the hacker, Alexey V. Borodin, with no need for jail-breaking.

Ars Technica notes that use of the service grants Borodin access to Apple IDs, passwords and other sensitive data, though the hacker responded that he doesn't use, log or monitor that information.

Borodin claims that the service hosted more than 400,000 transactions in the 24 hours following the launch of, and the security crackdown appears to have started already. In its first day, two IP addresses used by the replacement DNS server were blocked, though Borodin claims to be unsure whether Apple is responsible.

An Apple representative, Natalie Harrison, responded to the threat, claiming that Apple takes App Store security "very seriously" and that an investigation is in progress.

Latest comments (6)

Bruce Everiss Marketing Consultant 6 years ago
The game industry, since the 1980s, has been an ongoing technology war against theft. Most people will steal if they think there is zero chance of being caught. Just look at what people have on their MP3 players for evidence.
This war is the reason that the game consoles won over the Amiga and ST.
It is the reason for the collapse of the boxed PC game market.
It is the reason that 80% of the income from mobile phone gaming is from Apple, despite Android being vastly more popular.
So Apple have a big problem that they need to fix. If developers are deprived of their income they will reallocate their time to something more profitable.
0Sign inorRegisterto rate and reply
Tom Keresztes Programmer 6 years ago
Interesting that people did not consider the implications of what they are giving away. By providing the password and ID they allowed access to their payment details and addresses - the hacker just have to log in to iTunes with those details.

Edited 1 times. Last edit by Tom Keresztes on 16th July 2012 10:19am

0Sign inorRegisterto rate and reply
Fran Mulhern , Recruit3D6 years ago
What others have said. Give your account details to a criminal. Do that, you frankly deserve whatever you get on the basis of your stupidity alone.
0Sign inorRegisterto rate and reply
Show all comments (6)
People giving out their account information so they don't have to pay 0.99 dollars for a game they play on 300-1000 dollar device? The world has gone mad.
0Sign inorRegisterto rate and reply
Greg Wilcox Creator, Destroy All Fanboys! 6 years ago
And yet another thing I predicted about six years ago. Yet more proof of how stupid people are when they get so damn cheap about the games they buy.
0Sign inorRegisterto rate and reply
Peter Dwyer Games Designer/Developer 6 years ago
Er isn't this to bypass in app purchases not buying the actual games.
0Sign inorRegisterto rate and reply

Sign in to contribute

Need an account? Register now.