New in OS X: Get MacRumors Push Notifications on your Mac

Resubscribe Now Close

Apple Lists Top 25 Apps Compromised by XcodeGhost Malware

Thursday September 24, 2015 5:00 am PDT by Joe Rossignol
Apple has updated its XcodeGhost FAQ on its Chinese website with a list of the top 25 most popular App Store apps that were compromised by the malware. The list includes some notable apps such as WeChat, Heroes of Order & Chaos and a localized version of Angry Birds 2.

25-XcodeGhost-Apps
Apple advises that users should update the affected apps to fix the issue, noting that if a listed app is available on the App Store right now, it has already been updated. Apps with an asterisk are currently not available on the App Store, but Apple says they should be updated very soon.

  • WeChat
  • DiDi Taxi
  • 58 Classified - Job, Used Cars, Rent
  • Gaode Map - Driving and Public Transportation
  • Railroad 12306
  • Flush
  • China Unicom Customer Service (Official Version)*
  • CarrotFantasy 2: Daily Battle*
  • Miraculous Warmth
  • Call Me MT 2 - Multi-server version
  • Angry Birds 2 - Yifeng Li’s Favorite*
  • Baidu Music - Music Player with Downloads, Ringtones, Music Videos, Radio & Karaoke
  • DuoDuo Ringtone
  • NetEase Music - An Essential for Radio and Song Download
  • Foreign Harbor - The Hottest Platform for Oversea Shopping*
  • Battle of Freedom (The MOBA mobile game)
  • One Piece - Embark (Officially Authorized)*
  • Let’s Cook - Receipes
  • Heroes of Order & Chaos - Multiplayer Online Game*
  • Dark Dawn - Under the Icing City (the first mobile game sponsored by Fan BingBing)*
  • I Like Being With You*
  • Himalaya FM (Audio Book Community)
  • CarrotFantasy*
  • Flush HD
  • Encounter - Local Chatting Tool

    Apple has been working to remove all apps compromised by XcodeGhost from the App Store, but some affected apps may remain available for download. Apple has also outlined steps for developers to validate Xcode and said it would alert users to let them know if they have downloaded apps that could have been compromised.

    XcodeGhost is a new iOS malware that arose from malicious versions of Xcode, Apple's official tool for developing iOS and OS X apps, downloaded by some developers in China. Chinese developers then unknowingly compiled iOS apps using the modified Xcode IDE and distributed those infected apps through the App Store.

    MacRumors posted a detailed XcodeGhost FAQ over the weekend that explains more about the malware, who is affected and how to keep yourself protected, although Apple has since downplayed the severity of XcodeGhost compared to what some security firms initially reported.
    We have no information to suggest that the malware has been used to do anything malicious or that this exploit would have delivered any personally identifiable information had it been used.

    We’re not aware of personally identifiable customer data being impacted and the code also did not have the ability to request customer credentials to gain iCloud and other service passwords.
    Chinese developers initially disclosed XcodeGhost on microblogging service Sina Weibo last Wednesday.

    Tags: App Store, XcodeGhost
    • [ 134 comments ]


    Top Rated Comments

    (View all)

    Avatar
    garylapointe
    46 months ago
    What's the point of a top 25 list?

    Don't we need to know all of them?!?

    Gary
    Rating: 18 Votes
    Avatar
    shanson27
    46 months ago
    Never trust apps from China
    Rating: 15 Votes
    Avatar
    Madmic23
    46 months ago
    How did that Angry Birds app even make it into the store? There's no way it's from Rovio.
    Rating: 13 Votes
    Avatar
    MH01
    46 months ago

    If you have never even considered downloading one of the top 25, you haven't installed any of the rest.


    That's an awful assumption....
    Rating: 12 Votes
    Avatar
    Dilster3k
    46 months ago
    Love how Apple always brags about Appstore statistics... In reality it's just filled with crap like this.
    Rating: 12 Votes
    Avatar
    MH01
    46 months ago

    What's the point of a top 25 list?

    Don't we need to know all of them?!?

    Gary


    Sounds like the list might be in the hundreds . Top 25 is a PR move I suspect.

    Agree need the complete list.
    Rating: 6 Votes
    Avatar
    louiek
    46 months ago

    I was wondering about that too, but it looks like it might be legit:

    Rovio Localizes 'Angry Birds 2' to Boost Downloads in the Chinese Market ('http://en.yibada.com/articles/55915/20150821/rovio-localizes-angry-birds-2-boost-downloads-chinese-market.htm')


    So Rovio teamed up with someone who couldn't be bothered downloading a legitamite version of Xcode. Just...wow.
    Rating: 4 Votes
    Avatar
    Daalseth
    46 months ago
    For years malware has made users computers into bots
    Now malware can make PROGRAMMERS into bots.
    An amazing world we live in.
    Rating: 4 Votes
    Avatar
    MH01
    46 months ago
    Well about time they listed these.

    Wonder how many in total are effected.
    Rating: 4 Votes
    Avatar
    AdeFowler
    46 months ago

    Well about time they listed these.

    Wonder how many in total are effected.

    4000 according to the Register:

    http://www.theregister.co.uk/2015/09/23/xcodeghost_ios_app_infection_toll_rises_to_four_thousand/
    Rating: 4 Votes

    [ Read All Comments ]