News

Beware "popups" offering iPhones from "official" Apple web site, says McAfee

by Guy J Kewney | posted on 03 July 2007

A new Trojan, Phish-BuyPhony, was detected over this weekend, according to McAfee Avert Labs, which has "tracked down a phishing website that claims to be selling the first 25,000 exclusive sets of Apple iPhones."

The Trojan may fool some into thinking it's a standard Adwords-style advert.

It appears to divert you to the legitimate www.iphone.com web site. "The malware tracks the victim's web activity and spawns a popup advertisement when the victim browses upon Apple's official website, or popular search engines such as Google or Yahoo," says McAfee.

The real www.iphone.com will redirect you to Apple, at www.apple.com/iphone - and this one convincingly fakes that redirect. It even fakes the TrustE verification.

Details at McAfee's web site, with tech details here.