Apple is a tempting phishing target for scammers

Spam levels fell in August, but phishing attempts rose, including a focus on Apple, according to Kaspersky Lab

Spam volumes took a usual seasonal drop in August, but phishing spiked, including a noticeable interest in hijacking Apple accounts.

Spam (2)
A handful of very old malware programs, such as Bagle and Mydoom, continued to be popular with spammers, according to Kaspersky Lab.

Spam averaged 67.6% of all emails in August, down 3.6 percentage points compared to July, wrote Kaspersky Lab analysts Tatyana Shcherbakova and Maria Vergelis in a blog post. But 5.6% of those spam emails contained malicious attachments, an increase of 3.4 percentage points over a month prior.

The most prevalent malware program was "Trojan-Spy-html.Fraud.gen," which was in 8.1% of the emails containing malicious attachments. It's a very old piece of malware, first detected by Kaspersky Lab in 2004.

The malware is lodged inside a bogus HTML page that imitates a registration form for banks or payment services. It asks a victim for account information or personal information, which is then sent to a hacker.

The top 10 most common malicious attachments for August included four "ransomware" programs, which aim to extract money by locking victims' files or falsely warning they've been viewing illegal material.

The ransomware programs block "the work of the operating system and display a banner that gives instructions on how to unblock the computer. For example, the user is told to send a text message with a specific text to a premium-rate number," the analysts wrote.

Two other very old email worms, Bagle and Mydoom, also made the top 10. After infecting a computer, Bagle infiltrates a person's email contact list and sends itself out repeatedly. It was the third-most-common malware in August even though it was also discovered in 2004.

Two variations of Mydoom took the eighth and tenth places. Like Bagle, Mydoom also collects email addresses from infected computers and emails itself.

Phishing attacks rose tenfold, Kaspersky said, but still only amounted to a tiny fraction of overall spam, at .013%. Apple was one of the main phishing targets.

"We frequently came across emails that supposedly came from the official address of the company, but which in fact were phishing messages designed to deceive users and steal their logins and passwords," Kaspersky wrote.

Some of the phishing emails, which purported to come from the "Apple Security Center," warned users that their accounts had been frozen and that they have 48 hours to confirm their details.

Users are instructed to click on a link in the fraudulent email. "However, both the request to confirm the account information on third-party sites and the absence of a personal address should alert users to the risk of fraud," according to the post.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk

To express your thoughts on Computerworld content, visit Computerworld's Facebook page, LinkedIn page and Twitter stream.
Windows 10 annoyances and solutions
Shop Tech Products at Amazon
Notice to our Readers
We're now using social media to take your comments and feedback. Learn more about this here.