iTunes Virus

[Black Widow]

Thank you for buying iTunes Gift Certificate! – Virus

Another day, another minor twist on the virus attachment emails. This week it’s back to the bogus “iTunes” certificate confirmations:

Subject: Thank you for buying iTunes Gift Certificate!

Emails come from spoofed sending addresses, such as From:

* “Your iTunes Store” <support@itunes.com>
* “iTunes Online Store” <internet.shop@itunes.com>
* “iTunes Store” <customer.service@itunes.com>
* “iTunes Online Products” <customer.service@itunes.com>
* “Your iTunes” <gifts.support@itunes.com>
* “iTunes Products” <customer.service@itunes.com>

When in reality all of these (and many others, see the end of this post) come from already infected personal computers from across the globe.

The email message itself is pretty simple:

Hello!

You have received an iTunes Gift Certificate in the amount of $50.00
You can find your certificate code in attachment below.

Then you need to open iTunes. Once you verify your account, $50.00 will be credited to your account, so you can start buying music, games, video right away.

iTunes Store.

Attached are two files:

* iTunes_certificate_247.zip
* iTunes_certificate_247.exe

Naturally, the attachments will deliver virus payloads if run by the curious recipient. Also be aware the number in the attachment name can change in an effort to avoid spam filtering systems.

A few other spoofed sending addresses for this virus campaign:

* “iTunes Online Products” <account@itunes.com>
* “iTunes Online Products” <online.software@itunes.com>
* “iTunes Online Products” <shop.order@itunes.com>
* “iTunes Online Products” <store.order@itunes.com>
* “iTunes Online Products” <technical.support@itunes.com>
* “iTunes Online Products” <support@itunes.com>
* “iTunes Online Store” <account@itunes.com>
* “iTunes Online Store” <certificate.support@itunes.com>
* “iTunes Online Store” <certificate@itunes.com>
* “iTunes Online Store” <consultants@itunes.com>
* “iTunes Online Store” <gifts.certificate@itunes.com>
* “iTunes Online Store” <gifts@itunes.com>
* “iTunes Online Store” <internet.shop@itunes.com>
* “iTunes Online Store” <online.software@itunes.com>
* “iTunes Online Store” <online.store@itunes.com>
* “iTunes Online Store” <online.support@itunes.com>
* “iTunes Online Store” <products.support@itunes.com>
* “iTunes Online Store” <products.support@itunes.com>
* “iTunes Online Store” <products@itunes.com>
* “iTunes Online Store” <shop.order@itunes.com>
* “iTunes Online Store” <technical.support@itunes.com>
* “iTunes Products” <online.services@itunes.com>
* “iTunes Products” <shop@itunes.com>
* “iTunes Products” <technical.support@itunes.com>
* “iTunes Store” <gifts.support@itunes.com>

[The Mac]

thats insane way too many virus's around