Buying iTunes Gift Certificate Malware Spam

Websense® Security Labs™ ThreatSeeker™ Network has discovered that a "Thank you for buying iTunes Gift Certificate!" themed malware spam is spreading quickly over the Internet. It disguises itself as a notification from iTunes Store, asking users to open the attached malware to confirm the the certification code it claims to contain. So far, we have received over 300,000 copies of the scam in the latter part of this afternoon.

Screenshot of the spam:

The malware attached to the spam email message has been detected by some heuristic AV engines; however the detection rate is still very low.

Websense Messaging and Websense Web Security customers are protected against this attack.