SAVVY SHOPPERS on the hunt for deals may be getting more than they bargain for, due to a new online scam.

A fake e-mail that allegedly offers users of Apple’s iTunes Store a $50 voucher is doing the rounds, but instead of store credit, the attached zip file contains malware that could infect your PC.

The threat was identified earlier this week by German firm Eleven Security in a post on its blog. It said it could be assumed that the file contained a Trojan or worm. It was subsequently identified as Mal/BredoZp-B, which can allow malicious users access to your computer. It captures passwords and other information and can delete files on a personal computer.

Black Friday, the day after Thanksgiving, may be a US-based event that traditionally marks the start of the Christmas shopping season for retailers, but many websites offer discounts to their international customers too.

Online retailer Amazon has been offering deals this week to kick-start the Christmas shopping period, while Apple is offering discounts today to Irish shoppers on some of its most popular products, including the iPad, the MacBook Air and iPod.

Holiday periods have traditionally been a time of increased activity for spammers. But the popularity of social networks has given malware a new way to trick unsuspecting people.

Earlier this month, security firm Trend Micro reported a Facebook scam that lured users to click on a link offering a free coffee. A second scam last week enticed users to share a link on Facebook and Twitter for a free $100 voucher for the coffee chain.

“As Facebook users continue to fall for social engineering lures such as the one we reported here, the schemes targeting them are sure to continue,” Trend Micro anti-spam research engineer Edista de la Cruz wrote in a blog post.

Better safe than sorry: How to avoid online scams

WHILE MOST people are winding down for the holidays, the scammers are only getting started. To ensure you are as protected as possible from online scams, here are a few tips:

Keep your computer’s anti-virus, firewall and anti-spyware programs up to date. If your computer does get attacked, they will give you some level of protection.

If you receive e-mails asking you to confirm passwords and personal details, check with the company in question. It may be a phishing attack, where people are tricked into revealing confidential information to what they think is a legitimate source. Check for anything that seems out of place – misspellings, bad graphics, free web-based e-mail addresses.

As tempting as it is, don’t use the same password for all your online accounts. If you fall victim to a phishing scam, at least you won’t have given them access to everything.

Be wary of e-mails with attachments from unknown senders. If in doubt, don’t open it.

Think twice on social networking sites. If you see a promotion claiming to be from a company, check it out before you share it to your Facebook wall or Twitter feed. You may be unwittingly helping to spread a scam.

Be aware of your smartphone security. Android, for example, is being targeted by an increasing number of scams that collect personal information and take money out of your pocket by sending text messages from your account.

Free iPads, cut-price smartphones – all offers we've seen around the web. But do your homework before you sign yourself up to something you may regret. If it seems too good to be true, it probably is. CIARA O'BRIEN