James Delahunty
25 Nov 2011 8:27
Attack timed to coincide with Black Friday.
According to the Eleven Security Blog, iTunes users are being targeted with another scam designed to deliver a malware payload to their computers. The e-mail appears to come from the iTunes store, and contains a ZIP file that hosts malicious files.
The e-mail instructs the user that they have been sent a $50 iTunes store credit gift, and that the attached file in the e-mail included a code to redeem it. The malware contained is identified by A/V firms as Mal/BredoZp-B, which infects the computer with a backdoor trojan providing direct access for criminals and also is thought to mine for passwords and other information.
Black Friday scams online are quite common, as stores in the U.S. churn out deals and discounts to get customers on what's considered the first shopping day of the holiday season.