iPhone App Store hit by DANGEROUS malware

Apple has removed the apps infected with the malicious code

HUNDREDS of thousands of Apple iPhones could be "vulnerable to infection" from apps in the iOS App Store.

 

Apple is taking steps to remove malicious software from a slew of popular apps, it has confirmed.

The infected apps – believed to be part of the first large-scale malware attack on the Apple App Store – were laced with malicious code.

Hundreds of thousands of customers could be affected by the infected apps, which includes one of the world's most popular instant messengers.

The vicious code was added by an unofficial version of Xcode, the free application used to build iOS and Mac software.

Dubbed XcodeGhost, the counterfeit version of the Apple software injected malicious code which allowed hackers to gather information from the device and initiate phishing attacks.

 

A version of WeChat – one of the most popular instant messaging apps on the planet, with some 600 million monthly active users – was infected by the XcodeGhost code.

We've removed the apps from the App Store that we know have been created with this counterfeit software

Christine Monaghan,

 

It is not yet known how many apps have been affected by the code, but one Chinese firm estimates the number around 344.

This is the second problem for iOS users this month.

Apple spokesperson Christine Monaghan this morning confirmed the breach.

"We've removed the apps from the App Store that we know have been created with this counterfeit software," she said.

"We are working with the developers to make sure they’re using the proper version of Xcode to rebuild their apps."

WeChat, one of the affected apps in the iOS App Store, has 600million monthly active users

Tencent – the firm behind WeChat – does not believe any data has been stolen as a result of the malicious app.

It also added that anyone running WeChat 6.2.5 or newer is no affected.

However it is good practice to change your iCloud password whenever these types of attack take place.

The news comes days after Apple pulled one of the biggest software updates of the year because of a 'critical flaw' in the software.