The enclosed link leads to a site posing as an iTunes billing update page where users are asked for information including their credit card number, security code, Social Security number, and mother???s maiden name. ???We???ve gotten used to seeing the usual companies and brands attacked,??? said Andrew Lochart, an executive with Proofpoint, ???like PayPal, eBay and Citibank.