iPad users targeted by backdoor dissembled as iTunes update
May 2010
IT in Manufacturing
An e-mail invitation to an iTunes update gets iPad users’ PCs into backdoor trouble.
Success stories are cybercriminals’ go to sources of victims and the iPad craze could not have been left out of this picture. According to some reports, Apple sold 150 000 iPads in the first 60 hours of presale availability, with almost 100 000 of these coveted devices being pre-ordered in the first 10 hours. The figures make it clear as daylight why malware creators were so keen on crashing this promising party.
The invitation to the 'contagious fiesta' comes via the e-mail: an unsolicited message instructs iPad users to download on their PCs the latest version of the iTunes software as a preliminary step to an update of their iPad software.
Figure 1. The fake iPad software update announcement
To carry conviction, the e-mail emphasises that users should keep their iPad software updated 'for best performance, newer features and security'.
It goes on to clarify the multistep procedure by pointing out that in order for the update to be performed the latest version of iTunes should first be downloaded from the Internet. A direct link to the download location is conveniently provided. As a proof of cybercrime finesse, the webpage the users are directed to is a perfect imitation of the one they would use for legitimate iTunes software downloads.
Unfortunately for these users, following the malicious link means opening up a direct line to their sensitive data as instead of the promised iTunes update they get malware on their systems.
Figure 2. The download that will turn the update into a nightmare
Identified by BitDefender as Backdoor.Bifrose.AADY, the piece of malicious code inadvertently downloaded injects itself in to the explorer.exe process and opens up a backdoor that allows unauthorised access to and control over the affected system.
Moreover, Backdoor.Bifrose.AADY attempts to read the keys and serial numbers of the various software installed on the affected computer, while also logging the passwords to the victim’s ICQ, Messenger, POP3 mail accounts, and protected storage.
It is important to say that Mac users remain unaffected by this piece of malware.
For more information contact Alina Anton, senior PR and marketing coordinator, EMEA & APAC Business Unit, BitDefender, +40 212 063 470, [email protected], www.bitdefender.com
Further reading:
AI infrastructure solutions for data campus
Schneider Electric South Africa
IT in Manufacturing
Schneider Electric and Motivair deliver more than $290 million in power and cooling infrastructure for TeraWulf’s AI-ready Lake Mariner data campus.
Read more...
Africa’s data centre evolution: AI, edge computing and new energy demands
IT in Manufacturing
With less than half a gigawatt of active white space capacity serving over a billion people, Africa’s data centre sector faces a stark gap that AI’s surging power and cooling demands are set to widen. Vertiv and Open Africa Data Centres unpack how modularity, edge computing and smarter energy strategies could change the equation.
Read more...
How data and AI are unlocking South Africa’s next mineral frontier
IT in Manufacturing
Data, AI and blockchain are reshaping how mining companies explore, extract and prove the provenance of resources, opening a new frontier for South Africa’s mining sector.
Read more...
Luna Rossa partners with Siemens for 38th America’s Cup
Siemens South Africa
IT in Manufacturing
Siemens details how Luna Rossa is using digital engineering and simulation tools, from CAD to structural optimisation, to design a faster yacht for the 38th America’s Cup.
Read more...
AI is raising South Africa’s cybersecurity stakes
IT in Manufacturing
As AI accelerates both the sophistication and scale of cyber threats, South African organisations face significant gaps in cloud security, data governance and identity management that need to be addressed before AI capabilities are further embedded into business operations.
Read more...
How modern EAM is becoming the driver of productivity, resilience and sustainability in mines
Schneider Electric South Africa
IT in Manufacturing
Modern enterprise asset management is turning maintenance from a routine function into a strategic priority, helping mines extend the life of ageing infrastructure while improving productivity and safety.
Read more...
Physical AI solution with potential to transform South African manufacturing
IT in Manufacturing
NTT DATA and Hyster-Yale Materials Handling have deployed physical AI in an industrial assembly environment, embedding intelligence into production workflows to improve quality assurance and cut deployment timelines significantly.
Read more...
AI has an energy problem but Africa has an opportunity
IT in Manufacturing
Africa’s abundant renewable energy resources and largely unbuilt infrastructure put it in a unique position to power the growth of AI data centres sustainably, provided energy solutions are designed to match the scale and flexibility that AI demands.
Read more...
Decoupling software from hardware for future-proofed process automation
Schneider Electric South Africa
IT in Manufacturing
Schneider Electric explains why decoupling software from control hardware helps industrial operations modernise without disrupting production or replacing existing infrastructure.
Read more...
Advancing high-performance motorsport design
Siemens South Africa
IT in Manufacturing
Siemens explains how its simulation software is helping motorsport engineering group ORECA speed up vehicle design and optimise composite structures for its Le Mans hypercar programme.
Read more...
printer friendly version