iPhone and iPad fall prey to malicious apps
Cyber criminals have found a means to install malicious apps onto iPhones without the user’s interaction or knowledge. Researchers from Palo Alto Networks have discovered a strain of malware (dubbed AceDeceiver) that can infect iPhones and iPads that have not had their factory settings changed. To date, only devices in China have been affected, however the researchers point out that geographical spread is likely. FairPlay is an Apple software programme that prevents users from stealing purchased apps from its app store. AceDeceiver uses FairPlay as part of a man-in-the-middle (MITM) attack. The cyber criminal purchases an app from Apple’s App Store. They then intercept and save the authorisation code. The next stage is to use PC software, which has been developed to trick iOS devices into believing that the victim purchased the app, allowing the attacker to download the malware.





Just recently, two severe vulnerabilities in



And now:



Hackers have discovered a new way to install malicious apps onto your iPhone without your interaction. Hard time for mobile phone users!Just recently, two severe vulnerabilities in Qualcomm Snapdragon chip and Stagefright were spotted on the Android platform, affecting more than a Billion and Millions of devices respectively.And now:Hackers have discovered a new way to install malicious apps onto your iPhone without your interaction.





Researchers at Palo Alto Networks have uncovered a new strain of malware that can infect Non-Jailbroken (factory-configured) iPhones and iPads without the owner's knowledge or interaction, leaving hundreds of millions of Apple iOS devices at risk.





Dubbed AceDeceiver, the iPhone malware installs itself on iOS devices without enterprise certificates and exploits designing flaws in Apple's digital rights management (DRM) protection mechanism called FairPlay.





What's more concerning about this malware:





Unlike most iOS malware, AceDeceiver works on factory-configured (non-jailbroken) iOS devices as well.





FairPlay is an Apple's software program that prevents people from stealing purchased apps from its official App Store.

However, with the help of AceDeceiver's "FairPlay Man-in-the-Middle (MITM) technique," hackers can install malicious apps on your iPhone even without your knowledge, simultaneously bypassing Apple's other security defenses.

UPCOMING WEBINAR 🔐 Mastering API Security: Understanding Your True Attack Surface Discover the untapped vulnerabilities in your API ecosystem and take proactive steps towards ironclad security. Join our insightful webinar! Join the Session



According to researchers, the FairPlay Man-In-The-Middle (MITM) technique has been in use since 2013, as a way to distribute pirated iOS apps.

"In the FairPlay MITM attack, attackers purchase an app from App Store then intercept and save the authorization code," Claud Xiao from Palo Alto Networks explains in a blog post. "They then developed PC software that simulates the iTunes client behaviors, and tricks iOS devices to believe the app was purchased by the victim."

However, this is the first time the FairPlay technique has been used to spread malware on iOS devices, as the creator of the pirated software can install potentially malicious apps without your knowledge.





Currently, the malicious behaviors related to AceDeceiver has been spotted in China, but researchers warn that the malware could be easily configured to target iPhone users of other geographic regions as well.



