Cyber criminals, who are always quick to latch onto the latest trend to disseminate spam, have taken to using the launch of Angelina Jolie’s new film, Salt. The criminals are placing infected QuickTime files on file-sharing sites purporting to be related to the new movie.
Users who attempt to download the files receive a prompt to download “update codecs,” which are actually Trojan infected files. The trap appears to rely entirely on social engineering and is not related to a flaw in QuickTime, Apple told researchers with TrendMicro.