Windows Central published Windows ransomware was installed undetected using zero-day iTunes exploit
A quote from the article:
A zero-day vulnerability in iTunes and iCloud for Windows allowed ransomware to be installed on Windows PCs undetected.Windows ransomware was installed undetected using zero-day iTunes exploit
Unquoted service path allowed hackers to run malicious apps that wouldn't trigger antivirus software.
Vulnerability was actively being exploited to run ransomware BitPaymer.