Verisign iDefense Analysis of XcodeGhost
blogs.verisign.com