Users tricked in to downloading fake iTunes update that contains malicious code
Security experts have warned that Apple iPad users are being targeted by cyber criminals. Hackers are trying to dupe iPad owners in to downloading a fake iTunes update on their Windows computer, which, when installed, creates a backdoor for cyber criminals, allowing them to remotely access the machine or even use the computer to send spam messages.
A dialog box pops up telling the user that a recent iTunes update has been released for the iPad. Users who click on a link are taken to a site that looks exactly like the iTunes download web page, but the file the user downloads is actually a Trojan that installs malicious code on the machine. The Backdoor. Bifrose. AADY virus tries to steal passwords and login details for email accounts and instant-messaging services.
“The trick is pretty simple,” said Catalin Cosoi, a senior researcher for BitDefender, which uncovered the scam. “They’re clever to do it this way. If they were able to target Mac customers, it would have spread like wildfire, but because most antivirus companies detect this Trojan, it’s aimed at Windows users who have bought an iPad and who also don’t run a security product.”
BitDefender has advised iPad owners not to click on any links that appear in dialog boxes or alerts, and to download iTunes directly from the Apple website. The company also emphasised that the iPad itself remained unaffected by the Trojan.
Resource:
http://www.telegraph.co.uk/technology/apple/7638376/iPad-users-targeted-by-hackers.html?utm_source=tmg&utm_medium=TD_ipad&utm_campaign=tech2804am
