Malware City/Blog/

Apr
26
Filed Under:
ALERTS

iPad Users Targeted by Backdoor Dissembled as iTunes Update

26 April 2010
An e-mail invitation to an iTunes update gets iPad users’ PCs into backdoor trouble.

Success stories are cybercriminals’ go to sources of  victims and the iPad craze couldn’t have been left out of this picture.  According to some reports, Apple sold 150.000 iPads in the first 60 hours of presale availability, with almost 100.000 of these coveted devices being pre-ordered in the first 10 hours. The figures make it clear as daylight why malware creators were so keen on crashing this promising party.

The invitation to the “contagious fiesta” comes via the e-mail: an unsolicited message instructs iPad users to download on their PCs the latest version of the iTunes software as a preliminary step to an update of their iPad software.

iPad Spam

Fig. 1 The fake iPad software update announcement

To carry conviction, the e-mail emphasizes that  users should keep their iPad software updated “for best performance, newer features and security”.

It goes on to clarify the multi-step procedure by pointing out that in order for the update to be performed the latest version of iTunes should first be downloaded from the Internet. A direct link to the download location is conveniently provided. As a proof of cybercrime finesse, the webpage the users are directed to is a perfect imitation of the one they would use for legitimate iTunes software downloads.

Unfortunately for these users, following the malicious link means opening up a direct line to their sensitive data as instead of the promised iTunes update they get malware on their systems.

phishing apple itunes download

Fig. 2 The download  that will turn the update into a nightmare

Identified by BitDefender as Backdoor.Bifrose.AADY,the piece of malicious code inadvertently downloaded injects itself in to the explorer.exe processand opens up a backdoor that allows unauthorized access to and control over the affected system.

Moreover, Backdoor.Bifrose.AADYattempts to read the keys and serial numbers of the various software installed on the affected computer, while also logging the passwords to the victim’s ICQ, Messenger, POP3 mail accounts, and protected storage.

It is important to say that Mac users remain unaffected by this piece of malware.





By Sabina Datcu
Sabina Datcu, PhD has background training in Applied Informatics and Statistics, Biology and Foreign Languages and Literatures. In 2003 she obtained a master degree in Systems Ecology and in 2009 a PhD degree in Applied Informatics and Statistics.

Related

23-04-2010 | Facebook Application Spreading Adware

19-04-2010 | Trojan as Fake Google Chrome Extension

12-04-2010 | iPhone Unlocking Tricks get PCs into Trouble

09-04-2010 | Malware-Loaded Spam Waves Generously Wash the Shores of Facebook® and MySpace(TM)

Comments:

Nunuvyer Bizniz said on Apr-26-2010 11:42

"It is important to say that Mac users remain unaffected by this piece of malware."

Of course, because Windows is the problem. This really has nothing to do with iPad.

zerosomething said on Apr-27-2010 08:29

This is a Windows attack not an iPad attack. The user must install software on a Windows system from there they have access to the system. I seriously doubt this installs anything on the iPad or affects the iPad in any way.

Sabina Datcu said on Apr-28-2010 07:40

Exactly. If the malware creators were able to target Mac customers, it would have spread a lot, but because most antivirus companies detect this piece of malware, it’s aimed at Windows users who have bought an iPad and who also don’t run a security product.

Melvin Scotts said on May-2-2010 08:38

It is not hard to make malware the mac you know.
So saying windows is the problem is a moot point nowadays since macs can get viruses now.
The makers of this virus can make it work for a mac if they wanted too just a matter of time.

thomas sabo charms said on Jul-14-2011 04:32

You are right about your points because this will affect the state budget while America is going under huge pressure. Thanks for the information's and new coming bills discussions here.

tiffany bracelet said on Jul-30-2011 05:30

Amazing talent. I find her designs to be extraordinary!I agree this point.

Thomas Sabo Elastic Bracelet said on Oct-18-2011 03:27

Jewellery series by <a href=http://www.thomassabous.com/thomas-sabo-discount-code.html><strong>Thomas Sabo Discount Code</strong></a> come from Germany, sticking to the exceptional ideas of design and style to create tiny, fashionable silver merchandise for absolutely everyone. Silver provided by him contains bracelet which are colorful, beautiful layout rings, daring and fashionable pendants, and various other selection of silver. Not only this, one more series with classic style is complete of fashion which can fit any situation. It makes use of attractive way in the create up lines to interpret beautiful design to make a mark on the hearts of a lot of youthful women.1980's was the calendar year when <a href=http://www.thomassabous.com/thomas-sabo-disney-charms.html><strong>Thomas Sabo Disney Charms</strong></a> released his jewelry. Hard work has been place in to create pure ornaments in silver with excellent quality, which results in formatting it is exceptional fashion. The two most classical series by Thomas Sabo Thomas Sabo Allure Club and silver Assortment had been produced and deliver in fresh new items of designs. Its mentioned about charms that they represent our craze and obsession. If you want to make a man or woman experience good and appear distinct amongst the crowd, this is a excellent way to do so.<a href=http://www.thomassabous.com/thomas-sabo-dragon-ring.html><strong>Thomas Sabo Dragon Ring</strong></a> in the sterling Silver Collection which provides the perfect accessory for prevailing tends in vogue. Top most in top quality 925 strerling silver is graced with the use of hand-set and hand-cut zirconia stone. Your highest require in terms of top quality and aesthetics will get fulfilled with the unmatched good quality and models presented by them. The business also delivers unisex line which eliminates the the traditional differentiation in between jewellery for males and girls.The Rebel at Heart sequence includes Black Raven sequence under it and this sequence show three factors of legend, mystery, and drama fiercely and stylishly.In the <a href=http://www.thomassabous.com/thomas-sabo-eiffel-tower-charm.html><strong>Thomas Sabo Eiffel Tower Charm</strong></a> there are charms representing the birthstone for each and every month. These items are and will surely sparkle almost everywhere you go. Zodiac indications can also be extra to this. Their charms are created in a Cameo design and every single one is created to existing the distinctive identification of every signal.Other kinds of charms offered are household oriented charms and practically continuous sequence of symbol and cross charms. In this collection of household charms you are bound to find something for a baby, to illustrations of products of infant that are an indication of fatherhood and motherhood.You will be amazed to know that Thomas Sabo has presented even something for sports lovers. Assortment of Sports activities charms is large and will certainly tickle sports activities fans. The sports charms are also produced out of sterling silver which is bound to maintain any sports activities athlete shining with self confidence.The kid's club is one more exclusive assortment of charms. This assortment is meant for younger young children and teenager. Children have the selection to develop their own personal type also. Distinctive necklaces and bracelets have been created to in shape smaller sized kids.<a href=http://www.thomassabous.com/thomas-sabo-discount-code.html><strong>Thomas Sabo Discount Code</strong></a> a enormous variety for almost absolutely everyone and there are different sorts of pendants, rings, necklaces and other items of jewellery to pick from.Thomas Sabo Mens Rings,Thomas Sabo Bracelet Black,Sabo Online Shop

cheap jerseys said on Dec-16-2011 20:17


However, it is not. production replicas also needs a lot of hard work.http://www.nbajerseysoutlet.com/

Comment on this

Name:

Email:

Website:

Your email adress will not be published.