This is the first time that a malicious program manages to get around strict review process Apple applications.
Before this attack, they had met only five malicious applications on the App Store, according to computer security firm Palo Alto Networks.
Computer Hackers infiltrated malware to convince developers of legitimate software to use a counterfeit version of Apple’s software for creating applications for iOS and Mac , which is known as Xcode, the company said .
“We removed the applications from the App Store that we were created with this counterfeit software,” said Apple spokeswoman Christine Monaghan, in an email.
“We are working with developers to ensure that they are using the correct version of Xcode to rebuild their applications “added
.
did not say what would have to make iPhone users and iPad to determine whether their devices infected .
The director of Palo Alto Networks Threat, Ryan Olson, said the malware had limited functionality and company had no examples of theft data or other damage as a result of the attack.
However, he said it was “a big issue” because it showed that the App Store could be compromised if hackers infect machines developers create legitimate software applications. Other attackers can copy that method, which is difficult to defend, he said.
“Developers will are now a huge target,” he said.
The researchers said the infected applications included popular WeChat Tencent Holdings, Didi kuaidi and a music application Internet portal NetEase.
The corrupted version of Xcode was downloaded from a server in China that developers may have used that allows faster downloads the use of servers in the United States Apple, Olson said.
The Chinese security company Qihoo360 Technology said in his blog that he had discovered 344 applications with XcodeGhost affected.
Apple He would not say how many applications were detected.
No comments:
Post a Comment