US Gov't Issues Alert About iOS "Masque Attack" Threat

alphadogg writes Three days after security company FireEye warned of an iPhone/iPad threat dubbed "Masque Attack", the U.S. government has issued a warning of its own about this new risk by malicious third-party apps to Apple iOS devices. US-CERT warned: "This attack works by luring users to install an app from a source other than the iOS App Store or their organizations' provisioning system. In order for the attack to succeed, a user must install an untrusted app, such as one delivered through a phishing link." Revelations of Masque came on the heels of a related exploit (that also threatens Macs) called WireLurker.

Comments

I don't get it...

[XaXXon]

Don't you have to jump through all sorts of hoops to even INTENTIONALLY install an app from an alternate source?

Seems like it would be hard to do it unintentionally.