iPad Users Targeted by Backdoor Malware Disguised as iTunes Update

With all the hype that surrounds the Apple tablet — iPad, this was bound to happen. Success stories are cyber criminals’ best bet to get loads of targeted victims and the iPad craze couldn’t have been left out of this picture. It may have only been on the shelves in the US for a few weeks but the Apple iPad has already been hit with a virus. Apple iPad users are being warned of an email-borne threat which could give hackers unauthorised access to the device.

Sabina Datcu, technology writer for anti-virus firm BitDefender, wrote in a blog post today that the threat arrives via an unsolicited email urging the recipient to download the latest version of iTunes as a prelude to updating their iPad software.

The e-mails have a subject line that says “iPad Software Update” and offer a link to a Web page that looks like a legitimate iTunes download page, according to BitDefender. Instead, the link installs malware identified as Backdoor.Bifrose.AADY.

“Unfortunately for these users, following the malicious link means opening up a direct line to their sensitive data, as instead of the promised iTunes update they get malware on their systems.” Datcu said. The Backdoor.Bifrose.AADY malware injects itself in to the “explorer.exe” process and opens up a back door that attackers can use to take control of the system whenever they want, warned Datcu.

“It also attempts to read the keys and serial numbers of the various software programs installed on the computer and logs passwords to the victim’s ICQ, Messenger, and POP3 mail accounts, and protected storage“, Datcu said.

What to do if Attacked by an Apple iPad Malware (Backdoor, Virus, Trojan, Worm)?

- Do not download or save files from sources you do not know, even if an email purports to be from the official source.
- Use only the software vendor’s official website to download software for your iPad.
- Install and activate a reliable antimalware, firewall solution and spam filter.
- Enable automatic updates for your antimalware, firewall and spam filter with the latest virus definitions and application/file signatures.
- Run an anti-malware scan before opening or copying any files to your system, even if the file comes from a trusted source.

In this case, the specific malware/virus is seemingly primed for the Windows users with an iPad, as the Mac users are totally unaffected by the email link. So it seems to also indicate that it’s a Windows malware and doesn’t attack iTunes or the iPad itself. (It seems to have nothing to do with the iPad except that it phishes for iPad users.)