A new update request would direct the target to a fake webpage. Apple now uses https.
More at http://blogs.wsj.com/digits/2011/11/21/surveillance-company-says-it-sent-fake-itunes-flash-updates-documents-show/
Link to Original Source
Have you ever noticed that the people who are always trying to tell you `there's a time for work and a time for play' never find the time for play?