Categories: Tech & Society

iPhone Hacker Shows The World How To Steal In-App Purchases

It seems that a crafty Ruskie hacker who calls himself “ZonD80? has concocted a method that lets even novice hackers get free in-app purchases from the Apple App Store without even having to jailbreak their iPhone. 9to5Mac says that the hacker’s content-stealing method has three steps: “The installation of CA certificate, the installation of in-appstore.com certificate, and the changing DNS record in wi-fi settings.” Once all these steps are complete, the hacker’s in-appstore.com interface takes over and lets users grab content from the App Store without paying.

Apple responded to the security flaw in a statement provided to The Loop. “The security of the App Store is incredibly important to us and the developer community,” an Apple spokeswoman said. “We take reports of fraudulent activity very seriously and we are investigating.”

Amusingly, 9to5Mac also reports that ZonD80 is imploring users to “not pirate AppStore apps” even though his program is designed to do exactly that. 9to5Mac also issues a battle cry to iOS developers to help patch this apparent flaw in the App Store in order to make sure developers keep getting paid for their work. (As an editorial aside: Please don’t steal app developers’ content.)

position=left

Via: 9to5Mac

Prateek Panda

Prateek is the Founder of TheTechPanda. He's passionate about technology startups and entrepreneurship and enjoys speaking to new founders every day. Prateek has also been consistently regarded as one of the top marketing experts in the region.

Recent Posts

Ness Digital Engineering names Sudip Singh CEO to drive next phase of AI-led enterprise growth

Ness Digital Engineering, a global provider of intelligent data and software engineering services, today announced…

1 day ago

AI Launches: Fintech, Chatbot, Crypto & Voice AI

The Tech Panda takes a look at recent launches in the superfast field of Artificial…

2 days ago

Adani Commits US$ 100 B to Sovereign AI Infrastructure

The Adani Group announced one of the world’s largest integrated energy-compute commitments, a direct investment…

3 days ago

Generative AI in eKYC: The next phase of fraud prevention & compliance automation

As digital financial services continuously grow across India, the demand for faster onboarding and stronger…

3 days ago

New tech on the block: Logistics, Crypto, Finance, Cybersecurity & Agtech

The Tech Panda takes a look at recent tech launches. Logistics: India’s first corrosion-resistant stainless…

3 days ago

NeevCloud Partners with Agnikul Cosmos to Launch India’s First Indigenous AI Data Centre in Space

Launching India’s Sovereign AI Compute Network in Orbit Before the End of 2026 Reimagining sovereign…

4 days ago