Ugh. $100 to anyone who actually knows somebody who has been exploited.

I dont know about that exploit. But I clicked on a twitter link which installed malware and I didn't even realise.

What happened was paid apps would pop up adverts. And the browser would redirect to adverts before navigating to page links.

This vulnerability was already fixed for Nexuses by the time the article was written. The exact same thing has happened for iPhone. People forget that to date, a far higher percentage of iPhones have actually been infected with malware than Google-flavored Android phones due to XcodeGhost and that actual Google Android devices like Nexuses have an even better security record than that.

> a far higher percentage of iPhones have actually been infected with malware than Google-flavored Android phones

Citation desperately needed.

Malware infections from the Play Store have usually been on the order of thousands infected, with the occasional instance of 500k-1 million (http://www.ibtimes.co.uk/google-removes-13-android-apps-play...). XcodeGhost infected more than 500 million of a smaller total userbase (http://www.macrumors.com/2015/09/20/xcodeghost-chinese-malwa...). The numerator is an order of magnitude larger, and the denominator is an order of magnitude smaller, so a much higher percentage of iPhones have been infected with malware.

I can't find the percentage of Wechat users who use iOS, but that 500 million number is potential based on the fact that Wechat had 500 million users at the time.

Clearly not all are iOS, and clearly not all happened to have that one compromised version.

That was indeed a serious breach, but the rigor of your comparison is lacking.