Want Someone’s Apple ID Password? Just Ask Apple for it

Wow. Just wow. Marko Karppinen, head of a Finnish software development firm specializing in Mac software, just found himself on the wrong end of a security breach. According to his blog post from this morning Karppinen was the victim of a complex, crafty and well-executed scheme clearly carried out by a team of unscrupulous professional hackers. The end result; Karppinen’s Apple ID account was compromised and access to personal data was established for an unknown period of time. So how did this guerrilla team pull it off? They sent the following, umm, complex malicious code to Apple via email:

am forget my password of mac,did you give me password on new email marko.[redacted]@yahoo.com

No, seriously. That’s how easy it was for some grammar-stallion to have Apple change the email account associated with Karppinen’s account and issue a reset password to the new address. Luckily the culprit wasn’t quite smart enough (surprising, we know) to change Karppinen’s security question so he was able to regain control of his account rather quickly. Well, at least no one can say Apple customer service doesn’t act fast. They responded almost immediately to the thief’s email and accommodated him without hesitation. Kudos, Apple Support!

Read