Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hundreds of Apps In iOS App Store Contain Malicious Software


  • Please log in to reply
6 replies to this topic

#1 buddy215

buddy215

  • Moderator
  • 13,196 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:52 PM

Posted 20 September 2015 - 09:37 PM

SOURCE: Apple's iOS App Store suffers first major attack

 

Apple Inc said on Sunday it is cleaning up its iOS App Store to remove malicious iPhone and iPad programs identified in the first large-scale attack on the popular mobile software outlet............

 

Researchers said infected apps included Tencent Holdings Ltd’s <0700.HK> popular mobile chat app WeChat, car-hailing app Didi Kuaidi and a music app from Internet portal NetEase Inc.

 

Chinese security firm Qihoo360 Technology Co said on its blog that it had uncovered 344 apps tainted with XcodeGhost.

Apple declined to say how many apps it had uncovered.

 

Apple spokeswoman did not say what steps iPhone and iPad users could take to determine whether their devices were infected.

 

                          

iphone_cartoon.jpg

Edited by buddy215, 20 September 2015 - 09:40 PM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

BC AdBot (Login to Remove)

 


#2 Bailifei

Bailifei

  • Members
  • 109 posts
  • OFFLINE
  •  
  • Local time:04:52 PM

Posted 21 September 2015 - 01:36 AM

Apple software is still much better than Windows regarding security.
 
The reason, in large part, is that while Windows will try to run problematic programs, Apple software shuts down problematic programs. IOW, Apple is bigoted against computer viruses, whereas Windows has open borders.


#3 Gary R

Gary R

    MRU Admin


  • Malware Response Team
  • 835 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:10:52 PM

Posted 21 September 2015 - 03:09 AM

 

Apple software is still much better than Windows regarding security.

 

No it isn't. The only reason that Apple devices are less targeted than those running Windows is one of profitability.

 

It's no harder to write software to compromise Apple than it is to write software to compromise Windows, in fact in some ways it's easier, since the average Apple user thinks their machine is uninfectable. 

 

It's just that the pay off for your efforts is not so good, and since the vast majority of Malware written these days is done for profit, then the writers naturally target systems with most Users, since that will return them the most money.

 

Hence Android (for phones) and Windows (for computers) are the targeted platforms of choice.



#4 CodeSmasha

CodeSmasha

  • Banned
  • 524 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:52 AM

Posted 21 September 2015 - 05:16 AM

That includes jailbroken devices too.



#5 mremski

mremski

  • Members
  • 495 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NH
  • Local time:05:52 PM

Posted 21 September 2015 - 06:26 AM

The attack vector is interesting:  get the developers to use ficticious Xcode tools.  Rough equivalent to hijacking gcc.


FreeBSD since 3.3, only time I touch Windows is to fix my wife's computer


#6 buddy215

buddy215
  • Topic Starter

  • Moderator
  • 13,196 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:52 PM

Posted 21 September 2015 - 08:46 AM

SOURCE:  Apple App Store malware attack: Which iPhone and iPad apps are infected with XcodeGhost?

 

Most of the infected apps are used by iPhone and iPad owners in China. They include a music downloading app, an Uber-like ride sharing app, and the popular WeChat communication app.

Palo Alto Networks and Dutch security firm Fox-IT published a list of apps it claims are affected. The list predominantly features Chinese-language apps but also includes the following:

  • Lifesmart
  • CamScanner (incl. Pro and Lite)
  • CamCard
  • SegmentFault
  • OPlayer (and OPlayer Lite)
  • Mercury
  • WinZip
  • Musical.ly
  • PDFReader
  • Guaji Gangtai
  • Perfect 365
  • PDFReader Free
  • WhiteTile
  • IHexin
  • WinZip Standard
  • MoreLikers2
  • Mobile Ticket
  • QYER
  • Golfsense
  • Ting
  • Installer
  • TinyDeal
  • Snapgrab Copy
  • PocketScanner
  • CuteCut
  • SuperJewelsQuest2
  • InstaFollower
  • Baba
  • WeLoop
  • DataMonitor
  • Nice Dev
  • FlappyCirlcle
  • BiaoQingBao
  • SaveSnap
  • WeChat
  • Guitar Master
  • Jin
  • WinZip Sector
  • Quick Save

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#7 CodeSmasha

CodeSmasha

  • Banned
  • 524 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:52 AM

Posted 21 September 2015 - 11:52 PM

 

No it isn't. The only reason that Apple devices are less targeted than those running Windows is one of profitability.

 

It's no harder to write software to compromise Apple than it is to write software to compromise Windows, in fact in some ways it's easier, since the average Apple user thinks their machine is uninfectable. 

 

It's just that the pay off for your efforts is not so good, and since the vast majority of Malware written these days is done for profit, then the writers naturally target systems with most Users, since that will return them the most money.

 

Hence Android (for phones) and Windows (for computers) are the targeted platforms of choice.

 

 

Yes that's right then you've got the booing of everyone that hates Apple as well now: http://www.businessinsider.com.au/apple-haters-flood-google-play-with-1-star-reviews-for-move-to-ios-app-2015-9






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users