‘XcodeGhost’ Malware Attack in 2015 Impacted 128 Million iOS Users, According to Trial Documents

Back in 2015, a malware-infected variation of Xcode started distributing in China, and malware-ridden “XcodeGhost” apps made their way into Apples App Store and past the App Store review team.
There were more than 50 known infected iOS apps at the time, including significant apps like WeChat, NetEase, and Didi Taxi, with up to 500 million iOS users potentially impacted. Its been a long period of time considering that the XcodeGhost attack, but Apples trial with Epic is surfacing new details.
Trial documents highlighted by Motherboard indicate that an overall of 128 million users downloaded apps with the XcodeGhost malware, including 18 million users in the United States.
XcodeGhost was one of the greatest attacks versus iPhone users to date due to the number of iPhone users that were impacted. The 128 million impacted users got malware from downloads of more than 2,500 impacted apps.
Based on e-mails shared in the trial, Apple worked to figure out the effect of the attack and how to best alert those who downloaded infected apps. “Due to the a great deal of customers possibly impacted, do we desire to send an email to all of them?” Apples App Store vice president Matt Fischer asked.
Apple did eventually notify users that downloaded XcodeGhost apps, and also published a list of the leading 25 most popular apps that were compromised. Apple removed all of the infected apps from the App Store, and supplied information to developers to help them validate Xcode going forward.
XcodeGhost was an extensive attack, but it was not efficient or dangerous. At the time, Apple stated that it had no details to suggest that the malware was ever utilized for any destructive purpose nor that delicate individual data was taken, but it did gather app bundle identifiers, network details, and gadget names and types.

Leave a Reply

Your email address will not be published. Required fields are marked *