Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Apple Responds to YiSpecter Malware, Says Fix Was Implemented in iOS 8.4

MacRumors

MacRumors

macrumors bot
Original poster
Apr 12, 2001
63,557
30,887



Over the weekend, security site Palo Alto Networks detailed a new iOS malware that's able to infect non-jailbroken Apple devices using enterprise certificates and private APIs. It originated in Taiwan and China and was installed through several methods, including hijacking traffic from ISPs, an SNS worm on Windows, and offline app installation.

Called YiSpecter, the malware is able to download, install, and launch apps, doing things like replacing existing apps, displaying advertisements in legitimate apps, changing Safari's default engine, and uploading user information to remote servers.

yispecterpopupad.jpg
A popup ad that was able to install YiSpecter on iOS devices​

In response to the detailing of YiSpecter, Apple has released an official statement to The Loop explaining that YiSpecter is only able to target iOS users who are running an older version of iOS that have also downloaded content from untrusted sources.
"This issue only impacts users on older versions of iOS who have also downloaded malware from untrusted sources. We addressed this specific issue in iOS 8.4 and we have also blocked the identified apps that distribute this malware. We encourage customers to stay current with the latest version of iOS for the latest security updates. We also encourage them to only download from trusted sources like the App Store and pay attention to any warnings as they download apps."
Click to expand...
Apple implemented fixes for YiSpecter in iOS 8.4, so iOS 8.4.1 and iOS 9 are immune to the malware. Users who want to avoid being targeted by YiSpecter should make sure to upgrade to the latest version of iOS and as always, should avoid downloading apps from unverified sources.

Article Link: Apple Responds to YiSpecter Malware, Says Fix Was Implemented in iOS 8.4
 
Article Link
https://www.macrumors.com/2015/10/05/apple-yispecter-malware-fix-ios-8-4/
bbbb4b

bbbb4b

macrumors 6502
May 15, 2011
266
203
"Apple implemented fixes for YiSpecter in iOS 8.4, so iOS 8.4.1 and iOS 9 are immune to the malware."
Macrumors:
You need to fix this. Not only is it a run-on sentence, I can't tell if fix was in 8.4 or 8.4.1
 
  • Like
Reactions: PowerBook-G5
gsmornot

gsmornot

macrumors 68040
Sep 29, 2014
3,584
3,693
bbbb4b said:
"Apple implemented fixes for YiSpecter in iOS 8.4, so iOS 8.4.1 and iOS 9 are immune to the malware."
Macrumors:
You need to fix this. Not only is it a run-on sentence, I can't tell if fix was in 8.4 or 8.4.1
Click to expand...
The fix is in 8.4. If you have 8.4.1 or 9 you will also have the fix already.
 
Rogifan

Rogifan

macrumors Penryn
Nov 14, 2011
24,149
31,205
Why does it seem like all this malware stuff is either happening via jailbroken devices or people installing things outside the AppStore from untrustworthy sources? Has there been a case of someone outside of China getting malware via an app downloaded from the AppStore?
 
gsmornot

gsmornot

macrumors 68040
Sep 29, 2014
3,584
3,693
Rogifan said:
Why does it seem like all this malware stuff is either happening via jailbroken devices or people installing things outside the AppStore from untrustworthy sources? Has there been a case of someone outside of China getting malware via an app downloaded from the AppStore?
Click to expand...
Yes. Recently bad xcode was included in app builds that passed the app store filters. It was discovered and the apps have been removed but a few were popular apps. Not sure anything happened because of it but the bad code was there for legitimate downloads. Look for xcodeghost. https://www.macrumors.com/2015/09/20/xcodeghost-chinese-malware-faq/
 
Max(IT)

Max(IT)

Suspended
Dec 8, 2009
8,551
1,662
Italy
Last edited by a moderator:
  • Like
Reactions: PowerBook-G5 and bobob
inkswamp

inkswamp

macrumors 68030
Jan 26, 2003
2,953
1,278
deviant said:
exactly. 8% is still literally tens of millions of users. you can just close your eyes and pretend they aren't there, or that it's only 8%, but they are there.
Click to expand...

You mean the tiny subset of that 8% that also downloaded from untrusted sources.

See, you're exaggerating and overreacting. That 8%, millions of people or not, doesn't constitute an epidemic. Apple has to have a threshold below which they no longer issue security fixes. I think letting iOS 7 go is completely reasonable, especially since the upgrades are free and brain-dead easy to install.
 
S

SlipperySlop

Suspended
Sep 14, 2015
317
543
Kaibelf said:
Cue the people who claim that Apple is "forcing them to upgrade" by patching things in new software and who are complaining because they can't seem to get over using iOS6.
Click to expand...
All you are really doing is encouraging them to do so.

bbbb4b said:
"Apple implemented fixes for YiSpecter in iOS 8.4, so iOS 8.4.1 and iOS 9 are immune to the malware."
Macrumors:
You need to fix this. Not only is it a run-on sentence, I can't tell if fix was in 8.4 or 8.4.1
Click to expand...
The sentence isn't perfect, but it gets the point across and there really isn't ambiguity if you think about it just a bit.
 
Last edited by a moderator:
N

Noble Actual

macrumors 6502a
Sep 10, 2014
851
501
Easy solution is just not go on Chinese site and/or apps.

Keep on telling people I know not to use we chat but so many people do.
 
btrach144

btrach144

macrumors demi-god
Aug 28, 2015
2,866
6,977
Indiana
Xenomorph said:
Does this affect iOS 7, iOS 6, iOS 5, iOS 4, or iOS 3?

Lots of iOS devices cannot upgrade past those.
Click to expand...
Straight from the article, "Apple implemented fixes for YiSpecter in iOS 8.4, so iOS 8.4.1 and iOS 9 are immune to the malware."
 
S

Skoal

macrumors 68000
Nov 4, 2009
1,770
531
There are millions of people on iOS that no doubt don't consistently update because "it might mess my phone up"!
 
Rogifan

Rogifan

macrumors Penryn
Nov 14, 2011
24,149
31,205
Xenomorph said:
Does this affect iOS 7, iOS 6, iOS 5, iOS 4, or iOS 3?

Lots of iOS devices cannot upgrade past those.
Click to expand...
How many of those people are downloading from untrusted sources or are in China? My guesses people using devices with iOS 6 and older software aren't downloading much of anything these days.
 
  • Like
Reactions: vmistery and Max(IT)
brand

brand

macrumors 601
Oct 3, 2006
4,390
456
127.0.0.1
Skoal said:
There are millions of people on iOS that no doubt don't consistently update because "it might mess my phone up"!
Click to expand...

Do you have a source for that? I thought not.

I am not saying that you are right or wrong just that you made up that number.
 
L

lkrupp

macrumors 68000
Jul 24, 2004
1,882
3,810
Skoal said:
There are millions of people on iOS that no doubt don't consistently update because "it might mess my phone up"!
Click to expand...

Which is precisely why automatic updates should be forced down their throats whether they want them or not. Or at the very least they should be required to release Apple from all liability if they choose not to update their devices.
 
  • Like
Reactions: haruhiko and brand
AngerDanger

AngerDanger

Graphics
Staff member
Dec 9, 2008
5,452
29,003
bbbb4b said:
"Apple implemented fixes for YiSpecter in iOS 8.4, so iOS 8.4.1 and iOS 9 are immune to the malware."
Macrumors:
You need to fix this. Not only is it a run-on sentence, I can't tell if fix was in 8.4 or 8.4.1
Click to expand...
Actually, it's not; it's a compound sentence. Compound sentences are made out of two independent clauses (e.g. "Apple implemented fixes for YiSpecter in iOS 8.4" and "iOS 8.4.1 and iOS 9 are immune to the malware"). Between the two clauses, the coordinating conjunction "so" is inserted. As the first clause clearly states, the fix was implemented in iOS 8.4.
 
Last edited:
  • Like
Reactions: serogers1970, diegogaja, CarlJ and 9 others
MrNomNoms

MrNomNoms

macrumors 65816
Jan 25, 2011
1,156
294
Wellington, New Zealand
Xenomorph said:
Does this affect iOS 7, iOS 6, iOS 5, iOS 4, or iOS 3?

Lots of iOS devices cannot upgrade past those.
Click to expand...

iPhone 4 is over 5 years old (which is the latest oldest iPhone unsupported) - if you cannot upgrade a phone that is 5 years old to something newer (if you you put $10 each week for 5 years you could purchase two top of the line iPhone 6 phones today - off contract). At some point you have to have a cut off point to stop providing updates and I don't think it is untoward cutting off support for a device that is 5 years old.
 
  • Like
Reactions: smoking monkey and Cayden
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom