Apple iTunes Bug Actively Exploited in BitPaymer/iEncrypt Campaign

[silversurfer]

Content source

https://threatpost.com/apple-itunes-bug-bitpaymer-iencrypt/149075/

Bad actors are actively targeting a vulnerability in the Windows version of Apple iTunes to deliver BitPaymer/iEncrypt ransomware. It’s a new attack pattern that is difficult to detect, security researchers revealed Thursday.

Researchers from Morphisec Labs in August identified the abuse of the flaw, which exists in the Bonjour updater that comes packaged with iTunes for Windows, to deliver ransomware in an attack on an unidentified enterprise in the automotive industry.

Morphisec immediately disclosed the attack to Apple, which has recently patched the flaw in an iCloud for Windows update. While Apple will be sunsetting iTunes on Macs after the release of macOS Catalina earlier this week, Apple device users with Windows desktops will still need to rely on iTunes for the foreseeable future.

Apple iTunes Bug Actively Exploited in BitPaymer/iEncrypt Campaign

Attackers exploit an “unquoted path” flaw in the Bonjour updater in iTunes for Windows to deliver ransomware attacks.

threatpost.com

 

[[correlate]]

iTunes Zero-Day Exploited to Deliver BitPaymer

The ransomware operators targeted an "unquoted path" vulnerability in iTunes for Windows to evade detection and install BitPaymer.
Ransomware operators have been seen exploiting a zero-day vulnerability in iTunes for Windows to slip past security tools and infect victims with BitPaymer, researchers report.
Back in August, the Morphisec team noticed attackers targeting the network of an enterprise in the automotive industry. The researchers shared their discovery with Apple, and a patch is now available. Businesses and consumers should take note: Apple will sunset iTunes for Mac with the release of macOS Catalina this week, but Windows users will continue to rely on iTunes.

iTunes Zero-Day Exploited to Deliver BitPaymer

The ransomware operators targeted an "unquoted path" vulnerability in iTunes for Windows to evade detection and install BitPaymer.

www.darkreading.com