Report: Apple IDs Targeted by Kelihos Botnet

Kelihos (Waledac) operators have shifted to an Apple-focused phishing campaign: victims receive emails claiming an iTunes purchase (subject: "Pending Authorisation Notification") and are urged to "check their Apple ID" via a link that redirects to a convincing fake Apple login page which harvests credentials. Symantec observed the campaign delivering spam with lure details (including an IP and location) and advises users to avoid clicking unsolicited links and entering credentials.