An excellent comment from the original article: "Their store credit is being drained before PayPal because that's how iTunes works, uses your credit first. You

An excellent comment from the original article: "Their store credit is being drained before PayPal because that's how iTunes works, uses your credit first. You don't have to choose credit vs. PayPal. They aren't hacking those that use Credit Cards (VISA, MasterCard etc) because any purchase from a new device has to confirm the security number on the back of the credit card. Thus the attack is only going after open (non credit card) accounts, possibly phishing, possibly dictionary attacks, or any other form of hacking."