Mac Password

Hacked user accounts for Apple’s iTunes Store are for sale on China’s largest retail website Taobao, providing illegal access to credit card details for music and TV downloads, state media said Thursday.

A search by AFP on Taobao showed several shops were selling iTunes accounts for around 30 yuan (4.5 dollars), promising downloads of songs, games, movies and other products worth 30 dollars through Apple’s online entertainment store.

The Global Times reported that around 50,000 illegal iTunes accounts were being peddled on Taobao at prices ranging from one to 200 yuan.

Thousands of accounts have been sold over the past several months, it said.

The offers seen by AFP carried a disclaimer from Taobao saying it bore no legal liability for the items sold, nor could it vouch for the authenticity of the items.

Taobao said in a statement to AFP on Thursday that the company took “all reasonable and necessary measures to protect the rights of consumers” and could not act unless it received a formal request to remove the ads.

“At this time, we have not received any information from Apple or any other principal related to the iTunes accounts indicating that these products either violate our listing rules or infringe on the IP of others,” the company said.

Experts said hackers either hack foreign users’ iTunes accounts, which keep credit card numbers on file, or steal details of overseas credit cards to register several iTunes accounts that are then put on sale, the report said.

“Of course these accounts are hacked, otherwise how could they be so cheap?” a customer service representative for one of the online stores was quoted by the newspaper as saying.

The report said those who bought hacked accounts were encouraged to use them for 24 hours only — presumably as their real owners would catch on to the fraud and cancel their credit cards.

In July, Apple strengthened security measures on iTunes, asking users to make more frequent entries of the CCV code — a three- or four-digit number on the back of a credit card — when making purchases from a new computer.

At the time, Apple advised users whose “credit card or iTunes password is stolen and used on iTunes” to contact their financial institution and change their iTunes password.