The theft apparently combined a counterfeit app with a critical mistake by the musician.