Warning for the iPeople - new malware targets iOS devices

Administrator_JSVN

Administrator_JSVN

Administrator
Staff member
Joined
Jan 22, 2007
Messages
8,426
Just a friendly heads up...

http://mashable.com/2014/11/06/wirelurker-ios-malware

Read more at the link.

Hackers have found a way to infiltrate devices running iOS by attacking Macs and OSX with a malware called WireLurker, according to a report on Palo Alto Networks. The attack comes through access to a Trojan Mac application from the unauthorized Maiyadi App Store in China (which can be accessed from anywhere).
Click to expand...
 
From the same source:

Apple, however, may already have a fix in place. A company spokesperson told Mashable that they are "aware of malicious software available from a download site aimed at users in China" and has "blocked the identified apps to prevent them from launching." The company also recommends that users download and install software from trusted sources.
Click to expand...

Translation: If you have a jailbroken device, are accessing probably illegal downloads from a Chinese "App Store" and have lowered the settings for security on your device to a minimum then you are asking for trouble really potentially open to infection.

It's nice to see Apple do something about it so quickly though  [smile]
 
If you file your finger down to a point and stick it in an electrical outlet you could get a shock!

But, thanks anyway Shane.
 
This malware is primarily focused on the Chinese market and is limited to a few programs that are downloaded from China.  What the takeaway from this virus is that people are downloading from a site that is not certified by Apple and not from the App Store.

Buying your programs from the Official Apple IOS App Store, or from companies with programs certified by Apple will eliminate any danger of this malware reaching your IOS device.

Read this from MacRumors.com:

WireLurker Info

Cheers,

Frank
 
The device does not have to be jailbroken, according to the article.

Like I said, just sharing. Probably not a big concern currently, but it's a proof of concept and will likely be copied and improved upon.
 
Shane Holland said:
The device does not have to be jailbroken, according to the article.
Click to expand...

The article doesn't mention anything about it does it? I should have added another probably to cover that eventuality.
 
Wuffles said:
Shane Holland said:
The device does not have to be jailbroken, according to the article.
Click to expand...

The article doesn't mention anything about it does it? I should have added another probably to cover that eventuality.
Click to expand...

Sorry, must have been in another article I read about it then. But, I did read that it will affect devices that are not jailbroken.
 
Because part of the attack happens over USB, it looks like one only needs to have downloaded the infected app (from the Chinese app store) to a computer.  iPhones and iPads could be infected by connecting to computers with these apps downloaded.  Of course, one still has to proactively "trust" the computer to start the sync.
 
Shane Holland said:
And, another vulnerability announced for iOS today. Again under specific circumstances to be prone to an attack. Just sharing.

http://mashable.com/2014/11/10/ios-masque-attack/
Click to expand...

You forgot to post this portion of the story:

"The real-world potential threat is benign, for now.

The good news about Masque Attack is that even though it is indeed possible for someone to install a nasty version of a legitimate app on a non-jailbroken iOS device, the real world potential for damage is more limited.

That's because, tools like WireLurker notwithstanding (WireLurker requires a malware-infected Mac app to work over USB), the user needs to initiate the non-App Store installation on their device."

Unless you are an app developer with lax security habits, this is VERY unlikely to affect you.
 
If someone intentionally runs a program to reformat a hard drive, and they lose data as a result, does that constitute a "vulnerability" in the operating system that allowed the program to run?

This does not strike me as being an OS vulnerability so much as a phishing-type attack - the users are tricked into doing something that the OS has every reason to let them do.
 
itunes sent me a huge bill for which I didn't order.

A case has been opened and several others this morning
have had the same problem. That's what they told me.

So watch out folks.
 
waho6o9 said:
itunes sent me a huge bill for which I didn't order.

A case has been opened and several others this morning
have had the same problem. That's what they told me.

So watch out folks.
Click to expand...

This might be worthy of a new thread if you can post any supporting info? Not doubting, you, it just lends credibility if there is an 'official' source also reporting it...
 
The default security settings on a Mac will protect you from these sorts of scams. 

Just go System Preferences/Security & Privacy/General and click the "Mac Store and identified developers" button.  Simples.

Andrew
 
You must log in or register to reply here.
Back
Top