iOS App Store hit by major malware attack

Apple has cleaned up the App Store after hundreds of apps were found to contain malware.

Several cyber security firms found a malicious program called XcodeGhost embedded in the effected apps. Chinese security firm Qihoo360 Technology Co stated that it found 344 apps that were tainted by XcodeGhost.

Hackers embedded malicious code into legitimate apps by convincing developers to use a tainted counterfeit version of Apple’s Xcode, which is used to create iOS and Mac apps. Palo Alto Networks Director of Threat Intelligence Ryan Olson said that this version may have been used because it allowed for faster downloads than using Apple’s US servers.

Apple is usually on point when it comes to reviewing apps. In fact, before this incident, just five malicious apps had made their way to the App Store.

Apple spokeswoman Christine Monaghan told Reuters that the company has removed the apps that it knows were created using the counterfeit software. She added, “We are working with the developers to make sure they’re using the proper version of Xcode to rebuild their apps.”

Unfortunately, Apple did not offer any advice as to how iOS users could investigate whether or not their devices were infected.