How did this happen and how may this have been prevented? With modern day tools and technologies in place to protect against such occurrences, how will organizations such as Apple move forward in addressing this security gap? It is important to note that there was a failure to identify this malware prior to it infiltrating Apple and its users. Some are labelling this incident as a “first of its kind security breach” exposing a vulnerability and security gap in Apple’s mobile platform, which was once conceptualized as being the most secure of its kind. Is it too late however? Has the damage been done? In conjunction with this, Apple has sent email notifications to affected developers, thus instructing them to recompile their products by official Xcode, and to re-submit accordingly in order to prevent future breaches. WeChat and Angry Birds 2 are just a couple of examples of popular infected applications that are now being updated in the App Store with malware free versions, while many other iOS applications identified as being infected with XcodeGhost are temporarily unavailable. It has the capability to modify Xcode and infects iOS applications. XcodeGhost is the malware found in unofficial versions of Xcode downloaded by Chinese developers. Xcode is an integrated development environment (IDE) which contains a suite of software development tools generated by Apple for the development of software for OS X and platforms. Once downloaded, these malicious applications have the potential to obtain and utilize device and user information, though Apple has saidthey’ve found nothing to suggest any malicious activity as of yet.

Researchers at FireEye have found approximately 4,000 apps to be infected with the XcodeGhost malware, affecting hundreds of millions iOS users worldwide.

Rotten to the Core – Thousands of Apps in Apple’s Store InfectedĪ multitude of apps in Apple’s Chinese App Store contained a form of malware that recently bypassed Apple’s code screening process.

Apple developer tools hacked