

So… I should uninstall WeChat from my iPhone? It’s still advisable to remove any affected apps from your phone just in case. Security researcher Charlie Miller agrees, telling Wired: “I wouldn’t worry too much” because “the apps that did get through didn’t seem to do any really nasty stuff.” “According to Palo Alto Networks’ technical analysis, the currently compromised apps gather mostly innocuous data including the time infected app’s name and bundle identifier the name, type, UUID, and language and country settings of the device and the type of network to which it is connected.” Having said that, there’s probably no need to panic.

Should I be worried?Īt this point, it’s difficult to be sure whether or not malicious hackers have obtained the kind of data (personal information, passwords, photos and so on) that you should be worried about. Of course, it’s not possible to verify if the message really came from the hackers, or how innocent their intentions really were. ‘And 10 days ago, I actively shut down the server and deleted all the data, so it will not have any effect on anyone,’ it said.” The message added that the malware collected only basic data. “The message said the user inserted code that would have allowed the pushing of ads to devices but that the function was never exploited. On Sunday, a Weibo account named XcodeGhost-Author claimed responsibility and apologized, saying the malware was an “accidental discovery” that was distributed as “a one-time, mistaken experiment.”

It’s likely that Chinese app developers downloaded the counterfeit version of Xcode – which the hackers had put on Chinese servers and distributed on Chinese websites– simply to save themselves some mafan. Most app developers download the official Xcode software from Apple’s website – but as we all know too well from painful experience, downloading files in China from overseas servers can be very time consuming indeed. The infected apps were all made with a counterfeit version of Apple’s Xcode, a software development tool used to make iOS apps. As you may have heard, Apple has pulled a number of apps made by Chinese developers from the App Store – among them WeChat, Didi and China Unicom – because they contain malicious code that could be used to steal data from users.Īpple has famously rigorous standards to ensure iOS apps are safe, so this major breach is considered the first large-scale attack on the App Store.
