Trusted Design

KeyRaider: iOS Malware Steals Over 225,000 Apple Accounts

概要

Recently, WeipTech was analyzing suspicious Apple iOS tweaks reported by users and found over 225,000 valid Apple accounts with passwords stored on a server. In cooperation with WeipTech, we have identified 92 samples of a new iOS malware family in the wild. We have analyzed the samples to determine the author’s ultimate goal and have named this malware “KeyRaider”. We believe this to be the largest known Apple account theft caused by malware. KeyRaider targets jailbroken iOS devices and is distributed through third-party Cydia repositories in China. In total, it appears this threat may have impacted users from 18 countries including China, France, Russia, Japan, United Kingdom, United States, Canada, Germany, Australia, Israel, Italy, Spain, Singapore, and South Korea.

Created: 2026-02-23

Indicators

• FileHash-SHA1 - 4a154eabd5a5bd6ad0203eea6ed68b31e25811d7 -
• hostname - www.wushidou.cn -
• FileHash-SHA1 - 1cba9fe852b05c4843922c123c06117191958e1d -
• FileHash-SHA1 - 9ae5549fdd90142985c3ae7a7e983d4fcb2b797f -
• FileHash-SHA1 - 717373f57ff4398316cce593af11bd45c55c9b91 -
• FileHash-SHA1 - e0576cd9831f1c6495408471fcacb1b54597ac24 -
• FileHash-SHA1 - 8886d72b087017b0cdca2f18b0005b6cb302e83d -
• FileHash-SHA1 - af5d7ffe0d1561f77e979c189f22e11a33c7a407 -
• hostname - top100.gotoip4.com -
• FileHash-SHA1 - 5c7c83ab04858890d74d96cd1f353e24dec3ba66 -
• FileHash-SHA1 - a05b9af5f4c40129575cce321cd4b0435f89fba8 -
• FileHash-SHA1 - bb56acf8b48900f62eb4e4380dcf7f5acfbdf80d -

類似Pulses

• YiSpecter: iOS Malware That Attacks Non-jailbroken Apple devices (score: 0.74)
• iOS Trojan "Tiny"” Attacks Jailbroken Devices (score: 0.64)
• Trojan-Banker.AndroidOS.Faketoken follow-up (score: 0.61)
• XcodeGhost Modifies Xcode, Infects Apple iOS Apps (score: 0.60)
• ZBot Malware (score: 0.59)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る