I'm still not clear on that iTunes attack vector...

It's not likely that the online store itself is compromised, otherwise the attacker would probably choose a different method to sieve the money.