Thursday, October 7, 2010

Fake iTunes Bill Delivers Bank-Draining Trojan

I am so glad that I don't use iTunes.

Amplify’d from

Hackers have developed a new and clever scam that targets legitimate Apple
iTunes subscribers, then drains their bank account.

Researchers say that the fake and outrageously high bill is enough to raise the ire of legitimate iTunes subscribers. The reason for this is that most people are likely to take action when seeing an
"incorrect amount" appear on their bill.

The attack vector uses Adobe Flash, which is a technology that Apple refuses to use for its alleged security weaknesses. Panda Labs released a statement explaining the infection process:

Phishing has become a major problem for security companies in recent weeks, with users of the popular social network LinkedIn being the targets of a similar attack
these past few weeks. (Source:


Post a Comment