Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Apple Lists Top 25 Apps Compromised by XcodeGhost Malware

KanosWRX said:
So 99% of people have nothing to worry about as all these apps look like junk apps to me.
Click to expand...

As an expat living in China I can tell you, wechat is a huge deal..... Huge. We pay our bills using it. Book flights in it. Trains. Electricity and everything.

Also the official china Unicom app, pay phone bill linked to our credit cards etc.

On a side note today I got a pop asking me to change my password. I used the laptop to go manually to appleid and reset. But anyone know if this apple? Or to do with malware?
 
louiek said:
So Rovio teamed up with someone who couldn't be bothered downloading a legitamite version of Xcode. Just...wow.
Click to expand...
It's not about legit or not. In china it takes so long to download from apple servers def GFW related. Took me 40 minutes to download 37.5mb 9.0.1 update today. They just download Xcode from a Chinese mirror for speed. Very common here
 
MH01 said:
Damn.... guess they will not be poking fun at android in relation to malware next time...
Click to expand...
Watch a Samsung ad coming in 3... 2... 1...

Android's approach is more like that of Windows. I actually have antivirus software on my Android phone. There is a vulnerability called Stagefright that Sony patched in July, it's end of September and T-Mobile Netherlands just promised to release the patch in two weeks. Apple still win as far as I am concerned. Yes, this is a big nasty breach, but it's unlikely to repeat, and will be patched in five minutes. Android vulnerabilities may be patched at some point when the telecom gets around to doing it, or – in case of my LG tablet – never, because LG lost interest in updating the system.
 
MH01 said:
Damn.... guess they will not be poking fun at android in relation to malware next time...
Click to expand...
Well, if you want to see how much damage malware from a mobile app store can really do, check this:

http://blog.checkpoint.com/2015/09/21/braintest-a-new-level-of-sophistication-in-mobile-malware/

These apps passed Google's malware scanning process and are actually able to root many android devices automatically and install a root kit. XcodeGhost is completely harmless by comparison ...
 
  • Like
Reactions: MarkCollette
navaira said:
Watch a Samsung ad coming in 3... 2... 1...

Android's approach is more like that of Windows. I actually have antivirus software on my Android phone. There is a vulnerability called Stagefright that Sony patched in July, it's end of September and T-Mobile Netherlands just promised to release the patch in two weeks. Apple still win as far as I am concerned. Yes, this is a big nasty breach, but it's unlikely to repeat, and will be patched in five minutes. Android vulnerabilities may be patched at some point when the telecom gets around to doing it, or – in case of my LG tablet – never, because LG lost interest in updating the system.
Click to expand...

To be fair I have never seen apple patch something asap. Windows is the fastest to patch in my experience .
 
  • Like
Reactions: jedifaka
Robbo02 said:
It's not about legit or not. In china it takes so long to download from apple servers def GFW related. Took me 40 minutes to download 37.5mb 9.0.1 update today. They just download Xcode from a Chinese mirror for speed. Very common here
Click to expand...
Changing the oil in my car takes 5 minute...it takes 2 hours from my dealer.... I can have it done professionally or i can pay the kid next door yo make it..... It would be cheaper and faster with the kid, but since i am making a living thanks to my car, i will pay more and take more time...

A developer cutting corners is just paying the kid next door to make things faster (not cheaper in this case since XCode is free) but he will be in pain when his vehicle will stop in the middle of nowhere ....with no insurance that will cover his expenses to fix / bring back the car.

I know we are in a world that is always running, but take your time and do things right the first time, it'll take less in the longrun and you'll have less 'bumps'

EDIT:
Lighting a cigarette with a flamethrower is faster than with a lighter and also more dangerous....but faster is not always the answer, right tool for the right job!
 
Last edited:
  • Like
Reactions: MarkCollette
Rigby said:
Well, if you want to see how much damage malware from a mobile app store can really do, check this:

http://blog.checkpoint.com/2015/09/21/braintest-a-new-level-of-sophistication-in-mobile-malware/

These apps evaded Google's malware scanning process and are actually able to root many android devices automatically and install a root kit. XcodeGhost is completely harmless by comparison ...
Click to expand...

I'm not debating this as android v iOS. As users of either camp we cannot be complacent
 
  • Like
Reactions: MarkCollette
MH01 said:
I'm not debating this as android v iOS. As users of either camp we cannot be complacent
Click to expand...
True. But nonetheless it's a fact that serious malware is much more prevalent on Android than iOS due to a number of factors (the most important probably being that many Android devices stop receiving security updates after a relatively short time on the market).
 
MH01 said:
iOS is catching up ;)

Time to jump to Windows phone.....!!!!
Click to expand...
Since Windows Phone uses the same NT core t construct their OS, it is possible that some Windows desktop viruses could run on Windows Phone with little modification.
 
MH01 said:
They need apps first
Click to expand...
Some developer are waiting for the cracked developer tools first....Rovio Wechat &C will not release new sw for Windows Mobile unless they can download a cracked dev tool faster first!
 
ppcebay said:
Some developer are waiting for the cracked developer tools first....Rovio Wechat &C will not release new sw for Windows Mobile unless they can download a cracked dev tool faster first!
Click to expand...
Ha ha ha ha well played
 
H2SO4 said:
Whilst I do agree with this on the whole. People with a lot to lose do still do silly things. Look at Clinton.
Click to expand...

Look at VW, cost them billions.

There is no protection from YoYoheads who bypass systems or guidelines to save a few pennies or minutes.
 
iapplelove said:
I know people who constantly fill their phones up with dozens of free cheap apps and lite versions.

Glad I'm not an app whore lol
Click to expand...

Same here, no appetite for everything in the store.
Unfortunately whatever one researches at the app store has 50 bad clones for every good app.

Wish Apple cleaned that up.
 
iapplelove said:
I know people who constantly fill their phones up with dozens of free cheap apps and lite versions.

Glad I'm not an app whore lol
Click to expand...
I fill up my phone with half expensive paid apps and half free apps. No lite version. I hate light version.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back