Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Malware Xcode Ghost Infects 39 iOS Apps, Including WeChat, Affecting Hundreds of Millions of Users

Summary: Unit 42 reported that the XcodeGhost malware, which modifies the Xcode IDE to infect Apple iOS apps, had compromised 39 iOS apps as of its writing, including WeChat 6.2.5, Didi Chuxing, Railway 12306, China Unicom Mobile Office, and Tonghuashun, together reaching hundreds of millions of users. Tencent updated WeChat to 6.2.6 to remove the malicious code, and Fox-IT found thousands of malicious C2 traffic hits outside China tied to additional infected apps such as WinZip, Musical.ly, and CamCard v6.5.1.

What's compelling: The infected apps span instant messaging, banking, a mobile carrier, maps, stock trading, and games, and Fox-IT's sensor data showed thousands of malicious traffic hits outside China, so the exposure was not confined to one country or one app category.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related