iTunes bills lead to fake websites

Extremely high iTunes bills lead to fake websites
Users of Apple's popular multimedia tool iTunes should currently be careful when receiving digital mail from the alleged iTunes shop.

Data theft via iTunes

According to PandaLabs from Panda Security, various malicious programs are currently using the popular service to spy on confidential bank data. Thanks to the millions of iTunes customers, cyber criminals offer themselves en masse to potential victims via this platform. ITunes users receive invoices allegedly from the iTunes store via email, which lure them to fake login pages. There, the senders of the e-mails want to infect the visitors' computers and access login data.


The emails have the subject "Your receipt # 155562898256" and are exact copies of official iTunes letters. In the emails there is an invoice for a high amount, which is explained with an order never placed by the user. In order to see the exact invoice, he should follow a link that is contained in the mail. After clicking on it, he will be asked to download what appears to be a PDF reader. Once installed, the program redirects the user to infected websites. Various malware threats lurk there, including banker Trojans that steal personal data.

.

Luis Corrons, the technical director of PandaLabs, warns users of such attacks: “Phishing in itself is nothing new. It is all the more surprising that cyber criminals not only use such techniques again and again, but also that they work and users fall for it. This is probably due to the fact that this method is very simple on the one hand, but is also becoming more and more sophisticated and sophisticated on the other. Because the design and content of the wrong emails are imitated so perfectly that many computer users fall into the trap. In this case, the criminals take advantage of the fact that the users are confused and scared and therefore quickly click on the link to solve the problem. A good way to avoid such dangers is to type in the correct address in the browser and then check via your account whether the invoice you received actually exists. "
Panda Security provides all users who want to check whether their system is infected with malware, the free Panda Cloud Antivirus: www.cloudantivirus.com.
(mh)