Trusted Design

XCode Ghost

概要

End of last week, Palo Alto Networks published information about the "XCodeGhost" malware. Johannes already talked about it in today's podcast episode but I searched for more details about this story. Apple is known to be very strict with its application validation process. Every time a developer submits a new (or an updated) app, it must pass multiple security checks. Why so many applications infected by XCodeGhost successfully passed them? Could we imagine that Apple has some kind of trust with reputed developers or popular applications? Until now, ~50 applications have been reported vulnerable and mainly used in China. But some are popular worldwide like WeChat.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• XcodeGhost Modifies Xcode, Infects Apple iOS Apps (score: 0.76)
• Detecting XCodeGhost Activity (score: 0.63)
• OS X / Wirelurker (score: 0.56)
• KeyRaider: iOS Malware Steals Over 225,000 Apple Accounts (score: 0.53)
• YiSpecter: iOS Malware That Attacks Non-jailbroken Apple devices (score: 0.52)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る