App Store scammers are making thousands of dollars by exploiting TouchID

Shady developers have found a new way to trick users into spending ridiculous sums of money on worthless services.

The scheme, which was discovered by Redditors and reported by the welivesecurity blog, uses TouchID to trick users into in-app purchases, which can be as high as $99.99. 

The blog uncovered two such examples, both from purported fitness apps. In both cases, the apps instruct users to hold their finger over their iPhone's home button in order to "scan" their fingerprint for health data. While the "scan" is happening, though, the app triggers an in-app purchase, which is then authenticated via TouchID and completed before the  user even realizes what is happening. Read more...