Software security company Trend Micro has discovered a malicious application for the operating system iOS, which can also attack devices that are not Jailbroken. As in the case of Masque Attack, which we wrote about last year, also requires the user to click on a link in an email, text message, or website, which then installs the malware. The application is signed with a Developer Enterprise certificate iOS Program, which is a certificate for corporate applications that are not distributed through iTunes App StoreThis is also the reason why this malware was created.
Attackers were able to sign the app using a corporate certificate, making the device you want to install the app on think it was approved by them Apple. However, the malware also contains Spyware Xagent, which aims to collect important data and eventually get into devices used by the government, military or media. Spyware and malware run reliably on iOS 7, where it doesn't even have a visible icon. In the case of iOS 8 then runs malware and spyware as an application that you have to launch via the icon. Xagent then tries to collect data about the user and their communication, which it then sends to the attacker.
Protection is pretty simple, never install anything on your devices that comes from outside of iTunes App StoreEven when installing a corporate application, a question will appear before the installation itself asking whether you want to install the application. If you do not confirm it, nothing can happen to you.
*Source: trendmicro.com
Discussion of the article
Discussion is not open for this article.
