German Spyware Exploits Itunes Vulnerability

snoopy · Nov 21, 2011

German spyware exploits iTunes vulnerability

According to a report in Spiegel Online, "remote monitoring software" developed in Germany is designed to exploit a vulnerability in iTunes in order to infect target computers. In an advertising video, German company Gamma International GmbH is reported to have shown its FinFisher spyware application specifically using a vulnerability in the iTunes update system to install itself on target systems.

The exploit in question relies on the fact that, assuming Apple Software Updater is not active, iTunes uses an unencrypted HTTP request to query for the URL for the latest version of the program from the Apple server. Because the query is unencrypted, this URL could be modified. If a user were to respond to an iTunes update message, they could then be taken to a crafted web page intended to install the "remote monitoring tool" onto their computer. For the redirection to work, however, a Gamma customer would need to be able to actively interfere with the network, limiting its use to entities such as ISPs acting under government orders.
Click to expand...

Story - http://www.h-online.com/security ews/item/German-spyware-exploits-iTunes-vulnerability-1382455.html

Log in or Sign up

German Spyware Exploits Itunes Vulnerability

snoopy Registered Members

Share This Page

Log in or Sign up

German Spyware Exploits Itunes Vulnerability

snoopy Registered Members

Share This Page

Useful Searches