Security Alert: XcodeGhost iOS malware found. What you should do

<jeeproject@yahoo.com>

Researchers recently found a piece of iOS malware called XcodeGhost that has been embedded into a number of applications in the Apple App Store, without the app developers’ knowledge. These unsuspecting apps include popular apps such as WeChat and CamCard.

What can XcodeGhost do?
XcodeGhost is a piece of malware that can steal data and potentially trick people into providing their personally identifiable information. The XcodeGhost creators were able to repackage a tool used by legitimate iOS and OSX developers to create apps. When those developers created their apps using this tampered-with tool, they unknowingly inserted malware into their applications.

The malware made it into several applications that were live in the Apple App Store.

Does Lookout protect me?
We are providing you with a list of all affected applications so you can remove them from your device immediately. Unfortunately, Apple has recently eliminated the ability for third party developers (like Lookout) to see which apps are running on your device, which limits our ability to alert you about malicious apps, but we will continue to update this list to make sure you have the most up-to-date information.

How do I protect my iOS devices?

•	Be aware of the applications pushing dialog boxes to your screen and don’t enter personal information without first being aware of who is asking for it.
•	If you have any of the apps on your phone (listed on our blog), you should delete them immediately and wait until the app developer has released a new version with a patch.
•	If one of these apps is running on your device, we also recommend that you change your Apple account password and be wary of any suspicious emails or push notifications to your device asking for personal information.

See the Impacted Apps