Warning out vs fake iTunes 'gift certificate' malware

A fake online iTunes gift certificate hides malware that can threaten Black Friday shopper, a computer security firm warned.

 

Sophos said the malware, posing as a $50 gift certificate, appears to target Americans who may go shopping after Thanksgiving Day.

 

"The (malware comes as a) spoofed email (that) is purportedly from the iTunes Store, the subject line reads iTunes Gift Certificate, and the message includes an attachment that supposedly contains a certificate code," it said in a blog post.

 

Black Friday refers to the Friday after US Thanksgiving, when frenzied seasonal shopping typically starts.

 

Sophos also cited German email security provider eleven, which noted a wave of emails allegedly containing vouchers to the iTunes Store.

 

An investigation showed the attachment that comes with the email is a ZIP file containing malware detected as Mal/BredoZp-B.

 

Sophos said this may not be the last scam to take advantage of the holidays.

 

"As the holidays ramp up, so do scams like this. It’s understandable that cash-strapped holiday shoppers might be click-happy enough to try to lighten their holiday with $50 worth of free music, video and games," it noted.

 

It advised netizens to avoid click-candy like this phony iTunes certificate to keep cyber-safe over the holidays. — TJD, GMA News