News for hackers. Stuff that matters.
Re:Popular Chinese iOS apps compromised in malware attack by bitinn on Saturday September 19, 2015 @06:35AM (#10243880)
Think only Chinese iOS Apps are affected? Think again, because your favorite app might just be outsourced to Chinese developers.

Apps like Mercury, WinZip, PDFReader are reported to be affected by this Xcode trojan (have been taken down by Apple).

http://researchcenter.paloaltonetworks.com/2015/09/malware-x...

Re:Popular Chinese iOS apps compromised in malware attack by cooleng on Saturday September 19, 2015 @07:05AM (#10243938)
IOS now is the most dangerous platform...
Re:Popular Chinese iOS apps compromised in malware attack by coldtea on Saturday September 19, 2015 @09:16AM (#10244196)
Not by a large margin.

First of all, it's not the platform. There wasn't some vulnerability found in iOS that made this possible.

It's caused by pirated infected third party XCode downloads. If you use third party Visual Studio or Eclipse/Idea for Android development, you can get the same exact issues.

Second, apps run in a sandbox in iOS anyway, so those infected apps can't do much besides giving you ads and data about their usage.

Thirds, that's like 100 apps in the list, mostly all made in China, and all by people with infected, non-official XCode.

Contrast with malware in Android landm which amounts to 97% of mobile malware: http://www.forbes.com/sites/gordonkelly/2014/03/24/report-97...

Re:Popular Chinese iOS apps compromised in malware attack by flymoon on Saturday September 19, 2015 @10:54AM (#10244411)
Thanks for correcting me. I am wondering if IOS could add a new feature to detect bad apps.

For example IOS could give an operation history summary for each App. The list could be something like this:

APP1:

Photo ---- read ? times write ? times

Contact ---- ...

sms ---- ...

device ID ---- ...

APP2:

Photo ---- read ? times write ? times

Contact ---- ...

sms ---- ...

device ID ---- ...

customer can turn on/off this feature.

I believe if IOS have this feature, it will be much easier for IOS user to find out the bad APP.

Re:Popular Chinese iOS apps compromised in malware attack by coldtea on Saturday September 19, 2015 @12:45PM (#10244754)
>I am wondering if IOS could add a new feature to detect bad apps.

I think Apple can add such as a step into their build process (IIRC, with the new XCode 7 there's the option to submit a kind of bytecode to be built on Apple's servers depending on the target architecture etc).

Another thing they could do is enable some kind of "Little Snitch"-like network connection that a user can enable for apps. This way the user can be informed for any "mysterious" external connections going on.

Re:Popular Chinese iOS apps compromised in malware attack by lern_too_spel on Saturday September 19, 2015 @12:50PM (#10244777)
Yet days after this Trojan was disclosed together with a code signature, Apple is still relying on third parties to tell them which apps are affected. Meanwhile, we know that Amazon has been scanning their store for (at least) AWS keys for years, and Google has been running Bouncer on their store for longer.

It is well-known that due to Apple's restrictions on third-parties scanning software in their store, malware incidences in the App Store are significantly underreported.

Re:Popular Chinese iOS apps compromised in malware attack by myko on Saturday September 19, 2015 @10:55AM (#10244415)
Which popular/mainstream Android apps were taken down from Google Play due to malware?

I'll grant you third party Android app stores and side loading is more dangerous than iOS - but in the case of Google Play vs iTunes it seems like Google Play is safer.

Re:Popular Chinese iOS apps compromised in malware attack by coldtea on Saturday September 19, 2015 @12:50PM (#10244773)
>Which popular/mainstream Android apps were taken down from Google Play due to malware?

Well, there have been popular apps that have been infected as came pre-installed in phones:

http://thehackernews.com/2015/09/android-smartphone-malware....

As well as apps pulled from Google Play for having malware:

http://www.huffingtonpost.com/2015/02/04/mobile-malware_n_66...

http://www.coindesk.com/google-pulls-six-mobile-wallpaper-ap...

http://fortune.com/2015/07/08/google-play-fake-app/

Re:Popular Chinese iOS apps compromised in malware attack by myko on Saturday September 19, 2015 @02:39PM (#10245142)
Right, I agreed that there are some cases of malware on Google Play. The apps you linked don't look to have the number of users affected by this latest App Store scare. That's why I said overall Play seems safer than iTunes.