Feeds

Chinese crackers create counterfeit iTunes racket

Talkin' 'bout key generation

Protecting users from Firesheep and other Sidejacking attacks with SSL

Chinese crackers have reportedly cracked the iTunes gift card system.

The hack has spawned an active trade in counterfeit but functional iTunes vouchers on Chinese auction sites, such as Taobao.com.

As the trade has grown over the last six months or so prices have fallen from around $47 for a $200 card to 18RMB ($2.60). Music industry consultancy Outdustry confirmed that the counterfeit coupons work by buying a voucher and transferring the illegitimate credit into an iTunes account.

The fake gift card codes are reportedly created using key generators, an approach previously applied to Windows activation hacks.

"All the seller actually sells is the gift voucher code which they send you directly through Taobao’s IM software. You can then redeem the card in your iTunes account," Outdustry reports.

The market research agency notes that thousands of cards are up for sale at any time.

Apple is yet to comment on the issue. A fix for the problem might prove problematic because adjusting the key generation algorithm might invalidate genuine gift cards. It's unclear if the illegitimate trade has surfaced outside the PRC. ®

The next step in data security

More from The Register

next story
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
THREE QUARTERS of Android mobes open to web page spy bug
Metasploit module gobbles KitKat SOP slop
'Speargun' program is fantasy, says cable operator
We just might notice if you cut our cables
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
Greater dev access to iOS 8 will put us AT RISK from HACKERS
Knocking holes in Apple's walled garden could backfire, says securo-chap
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.