Fake iTunes gift certificate delivers a load of malware for Black Friday shoppers

Full story

 

Spy Co. sent Fake iTunes, Flash Updates

http://www.infowars.com/surveillance-company-says-it-sent-fake-itunes-flash-updates/

 

Re: Spy Co. sent Fake iTunes, Flash Updates

That's just scary!

 

I suppose iTune users are going to have to learn safe email practices!


----
rich

 

Re: Spy Co. sent Fake iTunes, Flash Updates

Spreading malware by tricking users into updating their Flash via a popup isn't anything new, of course. Koobface, from several years ago, was very successful:



Here is the popup in the current exploit:

http://online.wsj.com/media/finweb_G_20111121185229.jpg


Krebs puts all of this current exploit into perspective:
http://krebsonsecurity.com/2011/11/apple-took-3-years-to-fix-finfisher-trojan-hole/

----
rich

 

Re: Spy Co. sent Fake iTunes, Flash Updates

*Yawn*. Boring, uneventful security "scare".

 

Re: Spy Co. sent Fake iTunes, Flash Updates

The problem is just how do you distinguish between a genuine systems tray update pop-up & a fake one?

 

Re: Spy Co. sent Fake iTunes, Flash Updates

Speaking for myself:

My solution for Windows users I help is close the popup window and go directly to the software site to check for updates. I have them bookmark those sites, such as Adobe Reader, Adobe Flash, Java, etc. I stress not to click on links that pop up or appear in an email.

Once on the update site, the user can see if there indeed is a current update.

This procedure does take a few minutes, but is secure. Naturally, users have become accustomed to doing everything instantly, and malware authors take advantage of this, and exploit the convenience of the popup.

I poked around and found an iTunes support site that has KB advisories about updates, so MAC users will have to learn how their particular software things work and develop their policies and procedures accordingly.

I notice that the main Apple Support Page has users establish a password protected Support Account.

MAC users are in an evolutionary stage regarding security, as were Windows users many years ago. Safe and secure policies and procedures will eventually be stressed in the MAC world, as they are in the Windows world. For example, most alert Windows users probably would not fall for the current email attachment trick that has infected MAC users.

Four years ago this month, one of the ISC.edu analysts, Bojan, wrote about a MAC DNSchanger trojan in the wild, and concluded thus:

----
rich

 

Re: Spy Co. sent Fake iTunes, Flash Updates

I always do that for Flash & Java anyway (I have the sites bookmarked). I usually know when a SUPERAntiSpyware update is coming so I usually wait for the Systems Tray pop-up for that.

On my Windows machines I'm pretty sure I disabled the auto update in the Apple Update desktop icon & I just check it manually (I run iTunes & QuickTime). I usually know from following sites like Wilders (well normally just Wilders) if there is an impending update.

I guess that makes me a bit of a safe surfer.

Yes definitely, I don't always trust mail in my inbox even when it claims to be from someone I know!

 

Re: Spy Co. sent Fake iTunes, Flash Updates

These fake Flash updates mentioned in that link don't just pop up suddenly from the system tray or on the desktop. They are "sent", probably by email, though the article doesn't elaborate, so they would have to be initiated by an unsuspecting and security-unaware user.

 

Re: Spy Co. sent Fake iTunes, Flash Updates

I have heard of fake updates that have appeared on the desktop. I've never actually seen one though. They may be a cyber-myth.

 

Re: Spy Co. sent Fake iTunes, Flash Updates

The only time I've seen something like it was with a rogue antivirus alert. Of course just closing the browser gets rid of it.

 

Re: Spy Co. sent Fake iTunes, Flash Updates

Yes, pressing Alt F4 should do it, in Firefox/SeaMonkey anyway.