Apple’s Chinese App Store Has Come Under a Malware Attack
Source: Time
Apple’s iOS App Store in China has been attacked for the first time by malware, multiple sources report. Internet security company Palo Alto Networks says that approximately 39 applications have been compromised.
According to the Wall Street Journal, hackers planted an outwardly normal version of an Apple software called Xcode, used to develop iOS applications, on a Chinese cloud service called Baidu Pan. Developers began using it because it was faster to download than the Xcode software from Apple’s U.S. servers, the CBC reports, citing Palo Alto Networks director of threat intelligence Ryan Olson. However, the Chinese version was fraudulent and “Trojanized.”
Olson told CBC that the breach was “a pretty big deal” as it showed that the App Store could be compromised.
XcodeGhost, as the fraudulent code was named by AliBaba researchers, then gave hackers access to users’ devices and enabled phishing for passwords and login information. In its most recent analysis, Palo Alto Networks deemed XcodeGhost dangerous, saying it could set a precedent for other espionage and criminal groups.
Read more: http://time.com/4042173/apple-china-app-store-malware-xcode/
http://www.macrumors.com/2015/09/20/xcodeghost-chinese-malware-faq/
http://forums.macrumors.com/threads/what-you-need-to-know-about-ios-malware-xcodeghost.1918784/#post-21896151
= new reply since forum marked as read
Im guessing this is a chinese gov attack. Pretty well done. Im sure the NSA is impressed.