3 ms·
If I had to guess, the answer to both is some stolen session issue - either personal device or a device that the user was logged into once had saved login infor
by maicro 4y ago
If I had to guess, the answer to both is some stolen session issue - either personal device or a device that the user was logged into once had saved login information, which the attacker gained access to. However, to reduce the chance of needing to verify any information/login again, they left the default shipping address (as changing it would have A] left an address trail, and B] been suspicious).
But again, that's my guess - I'll leave solid answers to the actual security researched in the comment chain X)
- zenexer 4y agoThat was my guess, too. However, Apple seemed to think there was no relevant session activity on my account at the time. They stopped short of confirming that the payment and shipping info was entered manually. When I asked directly, they initially said they’d put me in touch with the fraud team, but the fraud team refused to talk directly to me and would only talk through another support rep. They refused to answer any questions about how the order was placed.