PandaLabs, the research arm of Panda Security, has warned that malware peddlers are sending out fake iTunes receipts via e-mail to lure users to download harmful software. The receipt looks authentic but is designed to make a user concerned about the total of the bill so they will click a "report a problem" link.
Clicking the link connects to a .RU site where a user will be asked to download a file. "After clicking the link, the victim is asked to download a fake PDF reader," PandaLabs said. "Once installation is complete, the user is redirected to an infected Web page containing the Zeus Trojan, which is specifically designed to steal personal data. This phishing attack was uncovered shortly after a similar phishing attack targeting LinkedIn users appeared last week, which appears to have originated in Russia."
PandaLabs is urging users to always be careful of e-mails that may hide harmless-looking but malicious links that could result in a computer becoming infected or personal sensitive information being stolen.
"Phishing is nothing new," said Luis Corrons, technical director of PandaLabs, in a statement. "What never ceases to surprise us is that the techniques used to trick victims continue to be so simple, but the design and content is so very well-orchestrated. It's very easy to fall into the trap. When using services such as iTunes, it is absolutely crucial that users never go to the website via email, but rather from the platform itself where they can verify their account status."
PandaLabs is urging users to always be careful of e-mails that may hide harmless-looking but malicious links that could result in a computer becoming infected or personal sensitive information being stolen.
"Phishing is nothing new," said Luis Corrons, technical director of PandaLabs, in a statement. "What never ceases to surprise us is that the techniques used to trick victims continue to be so simple, but the design and content is so very well-orchestrated. It's very easy to fall into the trap. When using services such as iTunes, it is absolutely crucial that users never go to the website via email, but rather from the platform itself where they can verify their account status."
