Popular Chinese iOS apps compromised in malware attack
zh.greatfire.org
Popular Chinese iOS apps compromised in malware attack
1–10 of 89 posts
Re: Popular Chinese iOS apps compromised in malware attack
#2oh!!!!!!!!!
Re: Popular Chinese iOS apps compromised in malware attack
#3A Chinese resource about XcodeGhost http://mp.weixin.qq.com/s?__biz=MzAxMzE2Mjc2Ng==&mid=2118455...
Re: Popular Chinese iOS apps compromised in malware attack
#4@XcodeGhostSource on GitHub claims to be the author of the malware and open-sourced it and apologizes.
"XcodeGhost" Source: https://github.com/XcodeGhostSource/XcodeGhost
Re: Popular Chinese iOS apps compromised in malware attack
#5Honestly... what's the difference between this kind of malware and the data-mining performed on websites, OSes (Windows 10, Android, iOS..), cellular companies, government backdoors, etal..? It's sickening (and criminal) that it's gotten to the point it has.
Re: Popular Chinese iOS apps compromised in malware attack
#6@XcodeGhostSource on GitHub claims to be the author of the malware and open-sourced it and apologizes. "XcodeGhost" Source: https://github.com/XcodeGhostSource/XcodeGhost
[deleted]
Re: Popular Chinese iOS apps compromised in malware attack
#7Downloading apps from App Store is very slow in China and sometimes you can't even open App Store successfully. It's not Apple's fault (but Apple should do something to solve it). The real cause is the gov and GFW. Many developers use XunLei(Thunder, a p2p downloading tool) to accelerate downloading. I used it too when I was in Shanghai China. After I moved to Hong Kong, I always download directly from App Store and the downloading speed is about 5MB/s.
Re: Popular Chinese iOS apps compromised in malware attack
#8Honestly... what's the difference between this kind of malware and the data-mining performed on websites, OSes (Windows 10, Android, iOS..), cellular companies, government backdoors, etal..? It's sickening (and criminal) that it's gotten to the point it has.
Did you read the article? This isn't a company intentionally mining user data, which is usually not criminal, as the EULA would have allowed those companies to do so. This is developers downloading Xcode from third-party sources, which are compromised and would inject third-party code to iOS apps sending analytics to a third-party server, without knowledge of the original developer.
Re: Popular Chinese iOS apps compromised in malware attack
#9Honestly... what's the difference between this kind of malware and the data-mining performed on websites, OSes (Windows 10, Android, iOS..), cellular companies, government backdoors, etal..? It's sickening (and criminal) that it's gotten to the point it has.
Did you read the article? This isn't a company intentionally mining user data, which is usually not criminal, as the EULA would have allowed those companies to do so. This is developers downloading Xcode from third-party sources, which are compromised and would inject third-party code to iOS apps sending analytics to a third-party server, without knowledge of the original developer.
What sort of analytics? Apple has blocked most of them. Why not just create some flashlight apps?
Re: Popular Chinese iOS apps compromised in malware attack
#10I'm trying to figure out if the version of WeChat I have installed is compromised. I haven't been able to find any specifics about versions of any of the apps. Does anyone have more info?