Spam emails claiming to report an iTunes Store purchase from a device that had not been tied to the Apple ID contain links to phishing websites that ask for Apple credentials.
Researchers from Symantec found that the cybercriminals leveraged Kelihos botnet to distribute the fraudulent messages.
Cybercriminals do not use Kelihos exclusively for sending spam and phishing email; the malware integrates other capabilities too, which include exfiltrating sensitive information, stealing crypto-curr…
