iTunes Online Products Email Virus Alert
May 30, 2010 | Filed under Security;
There is a recent virus that has been circulating around the Internet via email. You will see that the email is sent from iTunes Online Products (email@example.com) with the subject “Thank you for buying iTunes Gift Certificate!”. As for the body, below is the exact message that you will see.
You have received an iTunes Gift Certificate in the amount of $50.00
You can find your certificate code in attachment below.
Then you need to open iTunes. Once you verify your account, $50.00 will be credited to your account, so you can start buying music, games, video right away.
The attachment on the email received is Gift_Certificate_151.exe with an icon that looks exactly the same as Microsoft Word document. The good thing is 31 out of 41 antivirus engine has detected it as a threat. This attachment is a trojan that secretly downloads a file called tulb.exe from a russian domain and the tulb.exe file tries to establish a connection to an IP address at Netherlands.
If you have received such email, delete the email immediately and DO NOT open the attachment. If you have accidentally ran the attachment, run a full scan using your antivirus to remove the trojan.