Feeds

Malware scammers target iPhone

iFraud

Beginner's guide to SSL certificates

Fraudsters have been busy at work exploiting the hype surrounding last week's launch of the Apple iPhone.

One strain of scam email makes the bogus claim that recipients have won one of the much sought after devices in a bid to trick prospective marks into visiting a malware loaded site. The site attempts to exploit a number of well-known IE vulnerabilities in order to turn the unprotected PCs of victims into spam bots.

Another scam relies on infecting PCs with a new custom Trojan. Windows machines infected by the malware produce a popup, triggered by visiting either yahoo.com or google.com, which prompts users to visit iPhone.com. But system changes on infected systems mean surfers clicking on these ads are redirected not to Apple's site but a bogus site under the control of fraudsters.

The site has nothing to do with Apple but looks the part. However, prospective victims may well smell a rat when they are asked to send payment for their shiny new device through Western Union or Moneygram rather than via a credit card purchase. Marks taken in by the ruse end up handing over their money to cybercrooks based in the Baltic republic of Latvia, according to an analysis of the attack by anti-spyware firm Sunbelt Software.

The social engineering-based scams against wannabe iPhone owners come as security researchers and white hat hackers attempt to spot security vulnerabilities in Apple's iPhone, already unearthing ways to subvert the device's browser and uncover passwords hiding in Apple software. ®

Internet Security Threat Report 2014

Whitepapers

Go beyond APM with real-time IT operations analytics
How IT operations teams can harness the wealth of wire data already flowing through their environment for real-time operational intelligence.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Simplify SSL certificate management across the enterprise
Simple steps to take control of SSL across the enterprise, and recommendations for a management platform for full visibility and single-point of control for these Certificates.