The iPhone just lost its perfect security record — now what?

The Verge ^ | 6 Nov 2014 | Russell Brandom

[for-q-clinton]

For most of the iPhone's lifespan, it's been effectively immune to malware. There were theoretical attacks and viruses targeting jailbroken phones, but thanks to the tight controls of the App Store, finding iOS malware in the wild has been nearly impossible. If you didn't jailbreak your phone and you weren’t targeted by the NSA, you simply didn't have to worry about catching a virus.

Yesterday, that changed. A security firm called Palo Alto Networks discovered a malware program they’re calling Wirelurker, which sneaks into computers through unauthorized Chinese apps, then attacks iOS devices when they connect over USB. It’s an obscure line of attack (when’s the last time you actually plugged your iPhone into your computer?), confined to China, and so far the effects have been minimal. The actual payload for non-jailbroken phones was just a test balloon, side-loading a comic book app to prove the attack really worked. Jailbroken phones got a nastier payload, infecting payment apps, but that's to be expected. Last night, Apple blocked the apps, saying "We are aware of malicious software available from a download site aimed at users in China, and we’ve blocked the identified apps to prevent them from launching. As always, we recommend that users download and install software from trusted sources." Less than 24 hours after Palo Alto Networks published its report, Wirelurker appears to be mostly wiped out. Still, that doesn't mean Apple is completely in the clear. The vulnerabilities exploited by Wirelurker will be around for much longer, and could pose a serious threat to Apple's otherwise spotless record. Now that the platform has had its first real virus scare, there's reason to think it won't be the last.

[Norm Lenhart]

Sal, Dont speak to me...the Apple PR department will blacklist you too! ;)

[5thGenTexan]

"unauthorized Chinese app"

In other words, "bypass the security measures of the Apple ecosystem and lose the security levels in the Apple ecosystem ".

Which is quite different from getting malware from apps in the phone manufacturer's App Store, like with Google Play.

[Chgogal]

Ping-a-Ling!

[papertyger]

Good Lord!

If you could only see through the eyes of many long time Freezers...much of your “dialog” is really the subtext going through your mind!

[Salamander]

Oh, the horror of that threat.

Our iPhones are crap.

My Mac notebook is crap.

The only fun Apple thing I own is one of those freaky 90s iMac all-in-one fruit flavored monitor things, and that only because it’s so bizarre.

[and the only reason I have those are because I have a friend who could not manage to get Mac attachments mailed to me]

[Salamander]

Freezers?

[Norm Lenhart]

There’s another way to look at it

In other words, “bypass the security measures of the NSA ecosystem and thwart being spied on by your own phone. “

Apple leaves you no prayer at all to even attempt to protect yourself.

[Chgogal]

Also:

http://www.dailymail.co.uk/sciencetech/article-2823311/Apple-devices-malware-attack-iphones-iPads-Macs-hit-WireLurker-virus-steals-personal-information.html

http://news.yahoo.com/malware-infect-iphones-via-mac-computers-163353319.html;_ylt=AwrBJR8drVtUSEEAf7rQtDMD

[Nifster]

not really. When did you EVER connect to wifi via a USB adapter????? This is exclusively a Chinese problem

[papertyger]

Damned auto correct ;)

[Norm Lenhart]

Now you did it. You’ll be branded a collaborator ;)

[Salamander]

I bet you typed that on a ~Mac~.

:-D

[but it sure changed the context]

I assume you look at the DamnYouAutoCorrect sites?

Hilarious stuff.

[Norm Lenhart]

You seem to think I care about your concern for my well being.

Look. If you guys didn’t go full soviet every time someone mentioned anything but slavish devotion to a company, you might not get the reactions you do.

[Chgogal]

Yesterday, that changed. A security firm called Palo Alto Networks discovered a malware program they’re calling Wirelurker, which sneaks into computers through unauthorized Chinese apps, then attacks iOS devices when they connect over USB. It’s an obscure line of attack (when’s the last time you actually plugged your iPhone into your computer?), confined to China, and so far the effects have been minimal.

I don't think most of us use “unauthorized Chinese apps” BUT Apple does have to get on top of this.

[papertyger]

I will now!

the sneaky mac bastard won’t do it when I’m looking ;)

[Salamander]

I have several USB/WiFi adapters.

Hubby uses them on his desktop occasionally.

I have one Toshiba Qosmio laptop that has a dead NIC card and uses a USB/WiFi.

It’s not as rare as you think.

[Fresh Wind]

[5thGenTexan]

You seriously think the NSA would only target Apple phones and leave the Android community untouched?!?!

If they are monitoring phones, they are monitoring all brands. If you believe otherwise, You are well beyond the fan-boi you claim to deride.

[Salamander]

Double agent, 00Salamander

Honestly, though, I haven’t touched the computers in years.

I’m not even sure where the laptop is anymore.

The iPhone is a constant, daily irritant.

Mostly, I just play with my EMF apps and FReep [or Freeze, if you will] on the road.

:D

[Salamander]