‘XcodeGhost’ Malware Attack in 2015 Impacted 128 Million iOS Users, According to Trial Documents

Back in 2015, a malware-infected variation of Xcode began distributing in China, and malware-ridden “XcodeGhost” apps made their method into Apples App Store and past the App Store review team.
There were more than 50 recognized infected iOS apps at the time, including major apps like WeChat, NetEase, and Didi Taxi, with approximately 500 million iOS users potentially affected. Its been a long period of time given that the XcodeGhost attack, however Apples trial with Epic is emerging new information.
Trial files highlighted by Motherboard suggest that a total of 128 million users downloaded apps with the XcodeGhost malware, consisting of 18 million users in the United States.
XcodeGhost was one of the most significant attacks versus iPhone users to date due to the number of iPhone users that were impacted. The 128 million affected users got malware from downloads of more than 2,500 impacted apps.
Based upon emails shared in the trial, Apple worked to figure out the effect of the attack and how to finest inform those who downloaded contaminated apps. “Due to the a great deal of clients potentially impacted, do we desire to send an e-mail to all of them?” Apples App Store vice president Matt Fischer asked.
Apple did ultimately notify users that downloaded XcodeGhost apps, and likewise released a list of the leading 25 most popular apps that were compromised. Apple got rid of all of the infected apps from the App Store, and supplied info to designers to assist them verify Xcode going forward.
XcodeGhost was an extensive attack, however it was not effective or dangerous. At the time, Apple stated that it had no info to suggest that the malware was ever used for any malicious function nor that sensitive personal data was taken, but it did collect app package identifiers, network information, and gadget names and types.