Slashdot Mirror
FireEye: Many Companies Still Running XcodeGhost-Infected Apple Apps (csoonline.com)
itwbennett writes: In September, more than 4,000 applications were found to have been modified with a counterfeit version of Xcode, dubbed XcodeGhost. On Tuesday, FireEye said in a blog post that it has detected 210 enterprises that are still using infected apps, showing that the XcodeGhost malware 'is a persistent security risk.' In addition, whomever created XcodeGhost has also developed a new version that can target iOS 9, called XcodeGhost S, FireEye wrote.
Something for iOS developers to be aware of is they need to be careful of using binary only third party libraries which might also have been compiled with Xcode Ghost.
Thought thankfully Apple rejects app submissions that use them...
"There is more worth loving than we have strength to love." - Brian Jay Stanley
Apple is a simulator of how it would be if the Nazis had won.
Did him really?
Cripes, Dice, spring for an editor.
This is what happens when people download software from dodgy websites.
All computers are susceptible, but some more than others like Windows and Android!
exactly, which happens from ANY OS.
Are apps I've never heard of and likely would never use.
Chas - The one, the only.
THANK GOD!!!
Nobody credible has ever claimed that trojans don't exist for MacOS apps. The only people who say this, are people like you, saying how that's wrong.
Apparently, though, since they're reported here to be out in the wild, somebody found them useful, or at least worth installing.
Damage Control! Roll out the fud (but go soft on the fear, we've got iPhones to sell)
No it was the disingenuous claims that are made to confuse users like: "Macs dont get PC viruses" and the old "Built-in defences in OS X keep you safe from unknowingly downloading malicious software on your Mac.".
The latter was of course removed from their website around the time of the Flashback trojan.
Are you less likely to get a virus on a Mac than a Windows system? Of course. Are you even less likely to get one on a Linux system? Yes. So why not just be honest rather than trying to twist the truth like your customers are idiots?
And with that greater freedom comes the freedom to do really stupid things like install warez and then act all surprised when it turns out to be a trojan of some kind.
"Macs dont get PC viruses"
No, they get human viruses instead. *eyeroll* What the eff, a Mac IS a god damned personal computer. So sick of the "this is a Mac, and this is a PC". They're BOTH a god damned PC!
Yeah, it's totally Apple's fault that these asshats downloaded a hacked version Apple's Xcode IDE from a website not hosted by Apple.
Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
Please show me how I'm restricted from installing anything I want on my Mac.
Go ahead, we'll wait.
In case you missed it, this article is about people running hacked versions of Xcode on OS X, and iPhone and iPad are only involved distantly as the platform that people are writing code for in Xcode... on their Mac.
Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
And the reason why this article is specific to talking about enterprise, is because those businesses are doing two things that the average user won't be:
1. Downloading a hacked version of Xcode from a non-Apple website, and using it to develop applications, which then get trojaned by the crap version of Xcode
2. Sideloading these applications by way of their developer agreement / MDM solution, bypassing the App Store and it's approval / curation.
Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
So it's only a horrible mistake to use iOS in the enterprise. Nice takeaway, but mostly unimportant, as iOS won't ever make it far in the enterprise. Apple has always been terrible there.
An SE/30 and a Laserwriter make a good 'server' but that's their most recent success.
Yea, I don't get it either. Xcode can be downloaded from the App Store. That's how I got and update mine.
Chance favors the prepared mind.
Perfect is the enemy of good.
Makes sense. I'm just wondering why the hacked Xcode versions when you get it *for free* on the App Store and get updates there too. Just seems really stupid.
Chance favors the prepared mind.
Perfect is the enemy of good.