Feeds

Malware scammers target iPhone

iFraud

Security for virtualized datacentres

Fraudsters have been busy at work exploiting the hype surrounding last week's launch of the Apple iPhone.

One strain of scam email makes the bogus claim that recipients have won one of the much sought after devices in a bid to trick prospective marks into visiting a malware loaded site. The site attempts to exploit a number of well-known IE vulnerabilities in order to turn the unprotected PCs of victims into spam bots.

Another scam relies on infecting PCs with a new custom Trojan. Windows machines infected by the malware produce a popup, triggered by visiting either yahoo.com or google.com, which prompts users to visit iPhone.com. But system changes on infected systems mean surfers clicking on these ads are redirected not to Apple's site but a bogus site under the control of fraudsters.

The site has nothing to do with Apple but looks the part. However, prospective victims may well smell a rat when they are asked to send payment for their shiny new device through Western Union or Moneygram rather than via a credit card purchase. Marks taken in by the ruse end up handing over their money to cybercrooks based in the Baltic republic of Latvia, according to an analysis of the attack by anti-spyware firm Sunbelt Software.

The social engineering-based scams against wannabe iPhone owners come as security researchers and white hat hackers attempt to spot security vulnerabilities in Apple's iPhone, already unearthing ways to subvert the device's browser and uncover passwords hiding in Apple software. ®

Protecting against web application threats using SSL

More from The Register

next story
Brit telcos warn Scots that voting Yes could lead to HEFTY bills
BT and Co: Independence vote likely to mean 'increased costs'
Phones 4u slips into administration after EE cuts ties with Brit mobe retailer
More than 5,500 jobs could be axed if rescue mission fails
New 'Cosmos' browser surfs the net by TXT alone
No data plan? No WiFi? No worries ... except sluggish download speed
Radio hams can encrypt, in emergencies, says Ofcom
Consultation promises new spectrum and hints at relaxed licence conditions
Turnbull: NBN won't turn your town into Silicon Valley
'People have been brainwashed to believe that their world will be changed forever if they get FTTP'
Blockbuster book lays out the first 20 years of the Smartphone Wars
Symbian's David Wood bares all. Not for the faint hearted
Bonking with Apple has POUNDED mobe operators' wallets
... into submission. Weve squeals, ditches payment plans
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.