Cyber-thieves are exploiting the furore around iCloud by launching a phishing campaign that seeks to steal Apple IDs. The BBC reports:
ICloud was at the centre of the stolen celebrity photo scandal last week as many of the images were grabbed by hackers that targeted the service. Apple has responded by beefing up the security that notifies people when their iCloud account is accessed.
Attackers are now sending out bogus notification messages to trick people in to handing over login details. The criminal gang behind the phishing email messages runs the Kelihos/Waledac botnet, said Symantec in a blogpost about the cyber-attack.
A botnet is a large network of compromised computers used for a wide variety of cybercrimes, including sending out spam or mining victims’ machines for saleable data.
Information security training