Hackers took over an Electronic Arts subdomain which they used to host a fake Apple ID login screen designed to steal credit card info.