[13foxtrot]

From the FireEye site:

iOS users can protect themselves from Masque Attacks by following three steps:

1) Don’t install apps from third-party sources other than Apple’s official App Store or the user’s own organization.

2) Don’t click “Install” on a pop-up from a third-party web page, as shown in Figure 1(c), no matter what the pop-up says about the app. The pop-up can show attractive app titles crafted by the attacker

3) When opening an app, if iOS shows an alert with “Untrusted App Developer”, as shown in Figure 3, click on “Don’t Trust” and uninstall the app immediately

http://www.fireeye.com/blog/technical/cyber-exploits/2014/11/masque-attack-all-your-ios-apps-belong-to-us.html

[Swordmaker]

iOS users can protect themselves from Masque Attacks by following three steps:

FireEye forgot an extremely important first step before you ever get to do any of steps 1 to 3!

0) Don't JAILBREAK your iOS device.