{"id":2609,"date":"2015-09-21T07:07:38","date_gmt":"2015-09-21T14:07:38","guid":{"rendered":"http:\/\/kmtechblog.com\/?p=2609"},"modified":"2015-09-21T07:07:38","modified_gmt":"2015-09-21T14:07:38","slug":"xcodeghost-malware-found-in-hundreds-of-popular-ios-apps","status":"publish","type":"post","link":"https:\/\/kmtech.blog\/?p=2609","title":{"rendered":"\u2018XcodeGhost\u2019 malware found in hundreds of popular iOS apps"},"content":{"rendered":"<p>Who said iOS isn\u2019t affected by malware?\u00a0Researchers have discovered a new infection dubbed \u201cXcodeGhost\u201d that has made its way into hundreds of popular\u00a0iOS apps, including titles like WeChat and CamCard, that\u00a0could leave millions of users at risk.<\/p>\n<p><!--more--><\/p>\n<p>XcodeGhost makes its way into iOS apps through an infected\u00a0version of Xcode, Apple\u2019s software development tool for\u00a0building iOS and OS X apps. The malicious application has been distributed through Chinese file sharing service Baidu and used to compile iOS apps.<\/p>\n<p>It\u2019s thought the developers affected, most of which are based in China, were unaware they were using a dangerous version of Xcode, and inadvertently built apps containing the XcodeGhost malware, which have now made their way into the App Store.<\/p>\n<p>The malware was discovered by Palo Alto Networks, which has found more than 50 apps for iPhone, iPod touch, and iPad are carrying XcodeGhost. Many are Chinese titles, but some are incredibly popular in the West, too, such as WeChat, CamCard, PocketScanner, and even\u00a0<em>Angry\u00a0Birds 2<\/em>.<\/p>\n<p>It\u2019s thought more than\u00a0300 apps could be infected by this malware, making it the largest security breach in the history of the iOS platform. The good news is, Apple has already begun removing affected titles from the App Store.<\/p>\n<p>\u201cWe\u2019ve removed the apps from the App Store that we know have been created with this counterfeit software,\u201d Apple spokeswoman Christine Monaghan told <i>Reuters.<\/i>\u00a0\u201cWe are working with the developers to make sure they\u2019re using the proper version of Xcode to rebuild their apps.\u201d<\/p>\n<p>Apple has not revealed exactly how many apps it has removed so far, but reports suggest XcodeGhost has hit more than 500 million users. The malware has the ability to steal information like your device\u2019s name, type, and unique identification number, but no personal data.<\/p>\n<p>For more information on XcodeGhost and the full list of apps affected, see Palo Alto Networks\u2019 report by following the source link below.<\/p>\n<div class=\"infinite-scroll-metadata\"><\/div>\n<div class=\"sourcevia-wrapper\">\n<div class=\"sourcevia fCaps fLS0\"><span class=\"label fLS1\">SOURCE<\/span> <a href=\"http:\/\/researchcenter.paloaltonetworks.com\/2015\/09\/update-xcodeghost-attacker-can-phish-passwords-and-open-urls-though-infected-apps\/\" target=\"_blank\" rel=\"noopener\">PALO ALTO NETWORKS<\/a>, <a href=\"http:\/\/www.reuters.com\/article\/2015\/09\/20\/us-apple-china-malware-idUSKCN0RK0ZB20150920\" target=\"_blank\" rel=\"noopener\">REUTERS<\/a><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Who said iOS isn\u2019t affected by malware?\u00a0Researchers have discovered a new infection dubbed \u201cXcodeGhost\u201d that has made its way into hundreds of popular\u00a0iOS apps, including titles like WeChat and CamCard, that\u00a0could leave millions of users at risk.<\/p>\n","protected":false},"author":2,"featured_media":2610,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[3,20],"tags":[35],"class_list":["post-2609","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apps","category-mobile","tag-apple","et-has-post-format-content","et_post_format-et-post-format-standard"],"_links":{"self":[{"href":"https:\/\/kmtech.blog\/index.php?rest_route=\/wp\/v2\/posts\/2609","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kmtech.blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kmtech.blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kmtech.blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/kmtech.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2609"}],"version-history":[{"count":0,"href":"https:\/\/kmtech.blog\/index.php?rest_route=\/wp\/v2\/posts\/2609\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kmtech.blog\/index.php?rest_route=\/"}],"wp:attachment":[{"href":"https:\/\/kmtech.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2609"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kmtech.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2609"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kmtech.blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2609"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}