Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

11/18/2009
06:30 PM
George V. Hulme
George V. Hulme
Commentary
50%
50%

Phishers Target Apple Customers In New Attack

While OS X is targeted by a far fewer number of viruses than other operating systems, that's not stopping fraudsters from trying to hit Mac users with fraud.

While OS X is targeted by a far fewer number of viruses than other operating systems, that's not stopping fraudsters from trying to hit Mac users with fraud.I found this attack, if Mac news site 9to5mac.com's sources are accurate, to be somewhat ironic. And maybe even a foreshadow of attacks to come.

Here's what's happened, according to the site's Phishing scam hits Mac users - stay safe only story:

We received word this morning of what could be a brand new phishing attack that's in circulation at present - an email which purports to relate to a recent Apple retail transaction and asks for details of any recent orders. The email (image above) also carries a stuffed file. This contains an 'exe' file which will only launch on a Windows machine, as with all such phishing trips, be advised not to click on any attachments from sources you don't know/trust.

The email reads: "We recorded a payment request from 'Apple Inc.' to enable the charge of $7,548.45 on your account." It then goes on to advise readers to click on the attachment in the email in the event they want the transaction stopped.

This begs the obvious question: Why would attackers bother to target Windows users with attacks citing a purchase with Apple? Obviously, they're trying to get Windows users to install the software, and trying to profit from the number of Windows users who also buy Apple products.

But these scammers could try to pick any ruse: credit cards, bank accounts, tax statements. They have done and will continue to try all of these, but phishing scam strikes me as new.

Which means fraudsters are taking the momentum behind Apple seriously. Which may mean more Trojans and keystroke loggers designed to infect OS X users could be on the way.

For security and technology observations throughout the day, consider following me on Twitter.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
COVID-19: Latest Security News & Commentary
Dark Reading Staff 9/17/2020
Cybersecurity Bounces Back, but Talent Still Absent
Simone Petrella, Chief Executive Officer, CyberVista,  9/16/2020
Meet the Computer Scientist Who Helped Push for Paper Ballots
Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/16/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-25789
PUBLISHED: 2020-09-19
An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document.
CVE-2020-25790
PUBLISHED: 2020-09-19
** DISPUTED ** Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins are considered trustworthy"; however, the behavior "contradicts our secu...
CVE-2020-25791
PUBLISHED: 2020-09-19
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with unit().
CVE-2020-25792
PUBLISHED: 2020-09-19
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().
CVE-2020-25793
PUBLISHED: 2020-09-19
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with From<InlineArray<A, T>>.