A new update request would direct the target to a fake webpage. Apple now uses https.
More at http://blogs.wsj.com/digits/2011/11/21/surveillance-company-says-it-sent-fake-itunes-flash-updates-documents-show/"
Link to Original Source
Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!
Never try to teach a pig to sing. It wastes your time and annoys the pig. -- Lazarus Long, "Time Enough for Love"