Apple's Bouncers Let Dangerous Malware Sneak Into App Store Via WeChat And China's Uber Rival

ronjor · Sep 18, 2015

Thomas Fox-Brewster, Sep 18, 2015 @ 03:23 PM

It’s been a busy week for the Apple iPhone security team. First there was a serious flaw in iOS that could have allowed malware to sneak onto devices via the AirDrop filesharing service. Later in the week, it emerged scores of Chinese apps hosted on the official Apple App Store were infected with some dodgy code siphoning off information from users’ phones.
Click to expand...

http://www.forbes.com/sites/thomasbrewster/2015/09/18/xcodeghost-breaches-apple-app-store/

ronjor · Sep 21, 2015

By John Ribeiro IDG News Service | Sep 20, 2015
Apple has brought down a large number of apps from its store after it was found that around 40 iOS apps had been infected by a modified version of the company's software for developers.
Click to expand...

http://www.networkworld.com/article/2984811/apple-brings-down-malware-infected-apps-from-store.html

ronjor · Sep 21, 2015

Apple iOS Breach No Mere ‘Mistaken Experiment,’ Chinese Experts Say
By WSJ Staff Sep 21, 2015
As word spread in China over a rare breach of Apple’s normally secure iOS mobile platform in the country, security experts and the country’s official media moved quickly to squelch a claim that the episode was a harmless prank.
Click to expand...

http://blogs.wsj.com/digits/2015/09/21/prank-or-hack-apple-china-breach-in-eye-of-beholder/

J_L · Sep 21, 2015

Once again, nothing is foolproof as much as fanboys claim otherwise.

Dermot7 · Sep 23, 2015

Last week, Chinese app developers disclosed that an Apple programming tool had been hijacked to trick developers into embedding malicious software into apps for Apple devices.

The malware, called XcodeGhost, works by corrupting Apple’s Xcode software, which runs on Mac computers and compiles source code into apps that can run on iPhones, iPads, and other devices, before submitting them to the App Store. If a developer has XcodeGhost installed on their computer, apps that they compile include malware without the developer realizing it.

Although XcodeGhost is the first malware to spread this way in the wild, the techniques it uses were previously developed and demonstrated by Central Intelligence Agency researchers at the CIA’s annual top-secret Jamboree conference in 2012.
Click to expand...

Apple’s App Store Got Infected With the Same Type of Malware the CIA Developed

Dermot7 · Sep 24, 2015

Well, I tried validating my copy of Xcode using Apple’s validation method, and the results were alarming -- the Xcode 6.4 copy on my Mac, installed on July 8, 2015, at 12:24 p.m. directly from Apple, was not valid. I have never downloaded any copy of Xcode from anywhere except Apple servers.
Click to expand...

http://www.infoworld.com/article/2985721/application-development/hey-apple-were-you-hosting-hacked-copies-of-xcode.html

http://www.infoworld.com/article/29...nt-let-apples-xcode-validation-scare-you.html

After multiple queries, Apple got back to us late yesterday. An Apple spokesperson told us that the Xcode test recommended on the Apple developer blog verifies that "every single bit" is correct and that older versions of Xcode may have "a few bits flipped" in the course of ordinary usage -- hence the false positive that 6.4 was not a valid version. The solution, we were told, was simply to downoad Xcode 7.0, the latest version, from Apple.
Click to expand...

ronjor · Oct 1, 2015

Is Apple's walled garden showing signs of erosion?
A rudimentary malware attack that infected hundreds of iOS apps before Apple caught on puts a spotlight on security and brings into question the market perception that Apple's platform and devices are inherently safer than rivals' products.
By Matt Kapko CIO | Sep 30, 2015 10:57 AM PT
Click to expand...

http://www.networkworld.com/article...s-walled-garden-showing-signs-of-erosion.html

ronjor · Nov 5, 2015

Apple wages battle to keep App Store malware-free
By Jeremy Kirk IDG News Service | November 4, 2015
Thousands of apps have been found in recent weeks with potentially malicious components
Click to expand...

http://www.itworld.com/article/3001861/apple-wages-battle-to-keep-app-store-malware-free.html

Minimalist · May 7, 2021

'XcodeGhost' Malware Attack in 2015 Impacted 128 Million iOS Users, According to Trial Documents

Back in 2015, a malware-infected version of Xcode began circulating in China, and malware-ridden "XcodeGhost" apps made their way into Apple's App Store and past the ‌App Store‌ review team.

There were more than 50 known infected iOS apps at the time, including major apps like WeChat, NetEase, and Didi Taxi, with up to 500 million iOS users potentially impacted. It's been a long time since the XcodeGhost attack, but Apple's trial with Epic is surfacing new details.
Click to expand...

https://www.macrumors.com/2021/05/07/xcodeghost-malware-2015-128-million-ios-users/

Log in or Sign up

Apple's Bouncers Let Dangerous Malware Sneak Into App Store Via WeChat And China's Uber Rival

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

J_L Registered Member

Dermot7 Registered Member

Dermot7 Registered Member

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

Log in or Sign up

Apple's Bouncers Let Dangerous Malware Sneak Into App Store Via WeChat And China's Uber Rival

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

J_L Registered Member

Dermot7 Registered Member

Dermot7 Registered Member

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

Useful Searches