Developers working on the Tor anonymity service asked Apple months ago to remove a malicious Tor browser that poses a threat to its users from the App Store (via Ars Technica). After receiving no action through official channels, Tor project members now are using more public means to get this app removed.

tor-browser
A report ticket published three months ago by volunteer Phobos details the issue with rogue app.

"Tor Browser in the Apple App Store is fake. It's full of adware and spyware. Two users have called to complain. We should have it removed."

Tor officials confirmed they filed a complaint with Apple in December 2013 and received a response that the app developer was allowed to defend his app from these accusations.

Several followup emails were sent to Apple, but there was no response from the Cupertino company. Twelve weeks later and the app remains in the App Store, prompting the team to step up their campaign to get the app removed.

"I think naming and shaming is now in order. Apple has been putting users at risk for months now," writes lunar

"I mailed Window Snyder and Jon Callas to see if they can get us past the bureaucracy.

Otherwise I guess plan C is to get high-profile people on Twitter to ask Apple why it likes harming people who care about privacy. (I hope plan B works.)," writes arma.

Apple's App Store is known for being a walled garden where apps are vetted before they are allowed entry into the App Store. The process is not flawless, though, with researchers from Georgia Tech last year showing how an innocuous app with hidden malware-type code could slip through Apple's app approval system.

Once a malicious app is identified in the App Store, Apple has in the past taken steps to remove the app, but the exact process by which an app is removed is not known. In an earlier example, Apple quickly pulled a Russian SMS app that quietly scraped address book contacts and sent them to the developer's server.

Update 8:26 PM: Tor Browser has been removed from the App Store.

Top Rated Comments

155 months ago
All I see is people wanting this fake Tor app to be removed because the name and logo are the same.

Perhaps it's not so smart to license the logo and trademark under creative commons if you want to control it.
Score: 8 Votes (Like | Disagree)
155 months ago
Maybe they're leaving it up there to poison the name "Tor" so people think it's generally unsafe.
Score: 6 Votes (Like | Disagree)
rageguy Avatar
155 months ago
I am unable to find out what is so malicious about this fake Tor app. I don't see evidence of malware. All I see is people wanting this fake Tor app to be removed because the name and logo are the same.

In other words, the original complaint "Tor Browser in the Apple App Store is fake. It's full of adware and spyware. Two users have called to complain. We should have it removed." appears to be false accusations.

Since no evidence has been presented, Apple of course will not remove the app. "Two users have called to complain" is not evidence.
Score: 5 Votes (Like | Disagree)
Parasprite Avatar
155 months ago
Perhaps it's not so smart to license the logo and trademark under creative commons if you want to control it.

IIRC the license requires you attribute their work and not claim or imply that you represent them in any way, making this somewhat of a null point.
Score: 3 Votes (Like | Disagree)
Parasprite Avatar
155 months ago
You don't need to recall, it's easy enough to google.

https://creativecommons.org/licenses/by/3.0/us/

I'm no lawyer, but the terms surrounding it apart from attribution seems pretty loose. On the other hand, allowing people to use your trademark seems like pretty obvious attack vector for a project like Tor, where trust is likely considered important. So why not use a strict license, or not allow sharing of the trademark at all. That way you would know if Tor=Tor so to speak.
Did you read the license or just the summary? Because it seems pretty straight-forward (at least to me) with what is and isn't allowable under the license.

You may not implicitly or explicitly assert or imply any connection with, sponsorship or endorsement by the Original Author, Licensor and/or Attribution Parties, as appropriate, of You or Your use of the Work, without the separate, express prior written permission of the Original Author, Licensor and/or Attribution Parties.
Score: 2 Votes (Like | Disagree)
needfx Avatar
155 months ago
self immolations should do the trick
Score: 1 Votes (Like | Disagree)

Popular Stories

iOS 26

Apple Releases iOS 26.3 and iPadOS 26.3

Wednesday February 11, 2026 10:07 am PST by
Apple today released iOS 26.3 and iPadOS 26.3, the latest updates to the iOS 26 and iPadOS 26 operating systems that came out in September. The new software comes almost two months after Apple released iOS 26.2 and iPadOS 26.2. The new software can be downloaded on eligible iPhones and iPads over-the-air by going to Settings > General > Software Update. According to Apple's release notes, ...
m5 macbook pro deal

Why You Shouldn't Buy the Next MacBook Pro

Tuesday February 10, 2026 4:27 pm PST by
Apple is planning to launch new MacBook Pro models as soon as early March, but if you can, this is one generation you should skip because there's something much better in the works. We're waiting on 14-inch and 16-inch MacBook Pro models with M5 Pro and M5 Max chips, with few changes other than the processor upgrade. There won't be any tweaks to the design or the display, but later this...
M3 iPad Air

Apple's Next Two Products Are Coming Soon

Thursday February 12, 2026 11:17 am PST by
Apple plans to release an iPhone 17e and an iPad Air with an M4 chip "in the coming weeks," according to the latest word from Bloomberg's Mark Gurman. "Apple retail employees say that inventory of the iPhone 16e has basically dried out and the iPad Air is seeing shortages as well," said Gurman. "I've been expecting new versions of both (iPhone 17e and M4 iPad Air) in the coming weeks."...
Apple Logo Black

Apple Acquires New Database App

Wednesday February 11, 2026 6:44 am PST by
Apple acquired Canadian graph database company Kuzu last year, it has emerged. The acquisition, spotted by AppleInsider, was completed in October 2025 for an undisclosed sum. The company's website was subsequently taken down and its Github repository was archived, as is commonplace for Apple acquisitions. Kuzu was "an embedded graph database built for query speed, scalability, and easy of ...
iPhone 16e Bottom Crop

Apple Reportedly Unveiling a New iPhone Next Week

Tuesday February 10, 2026 1:51 pm PST by
Apple plans to announce the iPhone 17e on Thursday, February 19, according to Macwelt, the German equivalent of Macworld. The report said the iPhone 17e will be announced in a press release on the Apple Newsroom website, so do not expect an event for this device specifically. The iPhone 17e will be a spec-bumped successor to the iPhone 16e. Rumors claim the device will have four key...