Slashdot Mirror
Researchers Find iOS Malware That Infects Non-Jailbroken Devices (paloaltonetworks.com)
An anonymous reader writes: Researchers at Palo Alto Networks are reporting about a new iOS malware that could infect non-jailbroken devices without a user's consent. Dubbed "AceDeceiver," the iOS malware exploits a flaw in Apple's DRM software. The researchers claim that the iOS malware could technically infect any type of iOS device, provided a user downloads a third-party app. From the blog post on Palo Alto Networks' website, "AceDeceiver is the first iOS malware we've seen that abuses certain design flaws in Apple's DRM protection mechanism -- namely FairPlay -- to install malicious apps on iOS devices regardless of whether they are jailbroken. This technique is called "FairPlay Man-In-The-Middle (MITM)" and has been used since 2013 to spread pirated iOS apps, but this is the first time we've seen it used to spread malware." The aforementioned malware required users to download a compromised Windows application. Apple has removed three offending apps from the App Store, and it appears that only users in China were targetted.
couldn't drag me away...
we'll ride them someday
they now have their backdoor into the system courtesy of the Chinese.
Wheel of Time: Book by Book and Sumview (summary review) Bigdady92 style: http://bigdady92.blogspot.com/
Well that's what happens when you have software that ignores the user's actions and overrides them. You want to do it "for protecting copyrights", but the software isn't coded to obey copyrights (it wouldn't be DRM if it did, since the copyright owners don't want their copyrights managed to the extent of the law, they want extrajudicial rights you cannot get returned by a court case), so it doesn't give a shit what you want to use it for, it just avoids letting the user use their device for what they want and insists on overriding it.
It's ALL malware.
It's merely legally protected and "normalised" malware for people with official money and power, rather than unofficial money and power.
Modern app appers know that ONLY apps can app apps, and Apple's AppPhone is so appy, that it's impossible for LUDDITE malware to infect it!
Apps!
"...the iOS malware exploits a flaw in Apple's DRM software"
O The Irony.
Trying to protect their profits creates a situation that will almost certainly cost them money.
Just cruising through this digital world at 33 1/3 rpm...
For those interested in how the attack works, it relies on having a specific piece of malware (something akin to a rogue version of iTunes that runs in the background) installed first on your PC. After that, from what I understand, the attack roughly goes like this:
1) Attacker submits a piece of iOS malware to the official App Store and has it accepted.
2) Attacker purchases their own iOS malware from the App Store, receiving an authorization code for the purchase.
3) The PC malware gets the authorization code from the attacker.
4) The PC malware masquerades as iTunes to tell your iOS device that a new purchase is ready to install.
5) The PC malware provides the authorization code it received from the attacker.
6) Your iOS device downloads the iOS malware from the App Store.
Strangely, even though the offending apps have been pulled from the App Store, they're still available to people who have previously purchased them...including people who are getting infected via this attack, since that authorization code acts as proof of a previous purchase. Your device just thinks it's a previous purchase you made in iTunes but hadn't yet synchronized over to your device.
As for how the iOS malware was able to get into the App Store in the first place, apparently they were using geolocation to make the app display benign content in the App Store reviewer's location (in this case, they were acting like useless wallpaper apps) while serving up malicious content in China.
What is "targetted"?
Did you mean targeted? Does anybody have even a high school diploma around here?
The ability of reusing authorization codes is pretty bad. I am surprised it's not locked to the iTunes/Apple ID. I guess that would be the next step by Apple.... unless there is some reason that doing that would be a problem?? I can't really see why. Maybe it would effect free app give-away codes? Honesty don't know.
iOS devices don't install app from computers until you agree to trust the computer from the device.
So don't trust this computer.
Isn't that what the system of trusting/not trusting was for, so you can avoid getting malware inserted by devices you really shouldn't trust? This is another form of attack used by the "USB chargers" which are really hosts that want to install apps. And you stop it in the same way, by clicking "no" to trusting something you don't trust.
Thought that was something that was going to allow Manchester City to win the BPL every year.
I don't mind you going there. Android phones have a theoretical patch window of 1.5 years. And that clock starts ticking immediately after the device is released. So, if you're like me, and you wait for a phone to become inexpensive, you have - at best - a practical patch window of about six to eight months. That's it. It's even slower if you buy a phone from a carrier. Guess it takes a lot of time to bloat up that ROM with those carrier based tracking apps, CarrierIQ, anyone? What really gets my goat is that AT&T usually patches their their phone updates after Verizon (if at all).
I have a 4 year old AT&T Samsung S3 or i747, a four year old phone) which has Lollipop 5.1.1 (CyanogenMod). I also have an AT&T Samsung Note 3, a three year old phone, also from AT&T, but it is stuck on Lollipop 5.0.1 (TouchWiz). The S3 is going to get Marshmallow, while the Note3 development has all but stopped.
The difference is just one small thing: The S3 has an unlocked bootloader, and the Note3 has a locked & signed bootloader. The Note3 cannot possibly run anything other than an AT&T blessed TouchWiz ROM. Shame, really, as the Note3 has some nice hardware (and screen real estate) compared to the S3.
TL;DR Don't buy an Android phone from a carrier, and be sure the one you get doesn't have a locked & signed bootloader, so you can do the updates that the phone vendor won't do.
"a new iOS malware that could infect non-jailbroken devices .. provided a user downloads a third-party app"
What would make a real story is if this 'iOS malware' infected the device without the user visiting a malicious website, downloading and explicitly installing the malware.
--
Lately, we've been seeing a lot of free adverts for Palo Alto Networks?