Apple Lists Top 25 Apps Compromised by XcodeGhost Malware

Apple has updated its XcodeGhost FAQ on its Chinese website with a list of the top 25 most popular App Store apps that were compromised by the malware. The list includes some notable apps such as WeChat, Heroes of Order & Chaos and a localized version of Angry Birds 2.

25-XcodeGhost-Apps
Apple advises that users should update the affected apps to fix the issue, noting that if a listed app is available on the App Store right now, it has already been updated. Apps with an asterisk are currently not available on the App Store, but Apple says they should be updated very soon.

  • WeChat

  • DiDi Taxi

  • 58 Classified - Job, Used Cars, Rent

  • Gaode Map - Driving and Public Transportation

  • Railroad 12306

  • Flush

  • China Unicom Customer Service (Official Version)*

  • CarrotFantasy 2: Daily Battle*

  • Miraculous Warmth

  • Call Me MT 2 - Multi-server version

  • Angry Birds 2 - Yifeng Li’s Favorite*

  • Baidu Music - Music Player with Downloads, Ringtones, Music Videos, Radio & Karaoke

  • DuoDuo Ringtone

  • NetEase Music - An Essential for Radio and Song Download

  • Foreign Harbor - The Hottest Platform for Oversea Shopping*

  • Battle of Freedom (The MOBA mobile game)

  • One Piece - Embark (Officially Authorized)*

  • Let’s Cook - Receipes

  • Heroes of Order & Chaos - Multiplayer Online Game*

  • Dark Dawn - Under the Icing City (the first mobile game sponsored by Fan BingBing)*

  • I Like Being With You*

  • Himalaya FM (Audio Book Community)

  • CarrotFantasy*

  • Flush HD

  • Encounter - Local Chatting Tool

    Apple has been working to remove all apps compromised by XcodeGhost from the App Store, but some affected apps may remain available for download. Apple has also outlined steps for developers to validate Xcode and said it would alert users to let them know if they have downloaded apps that could have been compromised.

    XcodeGhost is a new iOS malware that arose from malicious versions of Xcode, Apple's official tool for developing iOS and OS X apps, downloaded by some developers in China. Chinese developers then unknowingly compiled iOS apps using the modified Xcode IDE and distributed those infected apps through the App Store.

    MacRumors posted a detailed XcodeGhost FAQ over the weekend that explains more about the malware, who is affected and how to keep yourself protected, although Apple has since downplayed the severity of XcodeGhost compared to what some security firms initially reported.

    We have no information to suggest that the malware has been used to do anything malicious or that this exploit would have delivered any personally identifiable information had it been used.

    We’re not aware of personally identifiable customer data being impacted and the code also did not have the ability to request customer credentials to gain iCloud and other service passwords.

    Chinese developers initially disclosed XcodeGhost on microblogging service Sina Weibo last Wednesday.

  • Top Rated Comments

    garylapointe Avatar
    100 months ago
    What's the point of a top 25 list?

    Don't we need to know all of them?!?

    Gary
    Score: 19 Votes (Like | Disagree)
    shanson27 Avatar
    100 months ago
    Never trust apps from China
    Score: 15 Votes (Like | Disagree)
    Madmic23 Avatar
    100 months ago
    How did that Angry Birds app even make it into the store? There's no way it's from Rovio.
    Score: 13 Votes (Like | Disagree)
    Dilster3k Avatar
    100 months ago
    Love how Apple always brags about Appstore statistics... In reality it's just filled with crap like this.
    Score: 12 Votes (Like | Disagree)
    MH01 Avatar
    100 months ago
    If you have never even considered downloading one of the top 25, you haven't installed any of the rest.
    That's an awful assumption....
    Score: 12 Votes (Like | Disagree)
    MH01 Avatar
    100 months ago
    What's the point of a top 25 list?

    Don't we need to know all of them?!?

    Gary
    Sounds like the list might be in the hundreds . Top 25 is a PR move I suspect.

    Agree need the complete list.
    Score: 6 Votes (Like | Disagree)

    Popular Stories

    google drive for desktop1

    Google to Roll Out New 'Drive for Desktop' App in the Coming Weeks, Replacing Backup & Sync and Drive File Stream Clients

    Tuesday July 13, 2021 1:18 am PDT by
    Earlier this year, Google announced that it planned to unify its Drive File Stream and Backup and Sync apps into a single Google Drive for desktop app. The company now says the new sync client will roll out "in the coming weeks" and has released additional information about what users can expect from the transition. To recap, there are currently two desktop sync solutions for using Google...