Apple Removes Scam App That Led to Hijacked Facebook Ad Accounts
Apple has removed an app that it was unknowingly hosting on the App Store that scammed Facebook advertisers and led hackers to use advertisers' ad budgets to run possibly malicious ads on Facebook's platforms, Business Insider reports.
The app previously ranked highly on the App Store when searching for "Facebook ads manager," the app used by advertisers to control their presence and ads they're running on the Facebook platform. The app presented itself as the legitimate ads manager for Facebook but was actually a backdoor that let hackers gain access to an account. One employee of an ad agency told Insider they were locked out of their account within just 10 minutes of downloading and logging into the app from Apple's App Store.
Apple said that the app was originally submitted to the App Store as a simple document manager with no ties or functionality to the Facebook platform. Apple claimed in a statement to Insider that the app turned malicious after it was approved for the company's platform. Facebook flagged the app to Apple in mid-July, but only after Insider's request for comment to the Cupertino tech giant was the app removed from the platform.
Apple proudly states that the App Store is "a safe and trusted place to discover and download apps," with apps being held to the "highest standards for privacy, security, and content." Apple screens all apps before they're presented for download on the App Store. According to the company, over 250,000 apps were rejected for the App Store last year for violating privacy guidelines, with an even larger 1 million apps rejected for possibly harmful and unsafe content.
Despite Apple's efforts, scam apps have remained a problem for the platform. A study last year found that 2% of the top 1000 top paid apps on the App Store at the time were scam apps, with those apps reportedly earning over $1 million in revenue. In a separate instance, a fake bitcoin app scammed its way to gain over $610,000 after being on Apple's platform.
Popular Stories
Phishing attacks taking advantage of Apple's password reset feature have become increasingly common, according to a report from KrebsOnSecurity. Multiple Apple users have been targeted in an attack that bombards them with an endless stream of notifications or multi-factor authentication (MFA) messages in an attempt to cause panic so they'll respond favorably to social engineering. An...
At least some Apple software engineers continue to believe that iOS 18 will be the "biggest" update in the iPhone's history, according to Bloomberg's Mark Gurman. Below, we recap rumored features and changes for the iPhone. "The iOS 18 update is expected to be the most ambitious overhaul of the iPhone's software in its history, according to people working on the upgrade," wrote Gurman, in a r...
Apple will introduce new iPad Pro and iPad Air models in early May, according to Bloomberg's Mark Gurman. Gurman previously suggested the new iPads would come out in March, and then April, but the timeline has been pushed back once again. Subscribe to the MacRumors YouTube channel for more videos. Apple is working on updates to both the iPad Pro and iPad Air models. The iPad Pro models will...
Apple today announced that its 35th annual Worldwide Developers Conference is set to take place from Monday, June 10 to Friday, June 14. As with WWDC events since 2020, WWDC 2024 will be an online event that is open to all developers at no cost. Subscribe to the MacRumors YouTube channel for more videos. WWDC 2024 will include online sessions and labs so that developers can learn about new...
Apple may be planning to add support for "custom routes" in Apple Maps in iOS 18, according to code reviewed by MacRumors. Apple Maps does not currently offer a way to input self-selected routes, with Maps users limited to Apple's pre-selected options, but that may change in iOS 18. Apple has pushed an iOS 18 file to its maps backend labeled "CustomRouteCreation." While not much is revealed...
Apple on late Tuesday released revised versions of iOS 17.4.1 and iPadOS 17.4.1 with an updated build number of 21E237, according to MacRumors contributor Aaron Perris. The updates previously had a build number of 21E236. The revised updates are available for all iPhone and iPad models that are compatible with iOS 17 and iPadOS 17, but they can only be installed via the Finder app on macOS...
With the App Store and app ecosystem undergoing major changes in the European Union, The Wall Street Journal today shared a profile on App Store chief Phil Schiller, who is responsible for the App Store. Though Schiller transitioned from marketing chief to "Apple Fellow" in 2020 to take a step back from Apple and spend more time on personal projects and friends, he is reportedly working...
Top Rated Comments
So good work again Apple for saying it's far too unsafe to let people load whatever apps you like on your iPhone/iPad, and justifying the app store as the only safe way to allow them, while hosting scams again and seemingly after being flagged, doing nothing about it until the media are going to shame you. ??♂️
I rather have a store where 1.25M scam apps are being removed annually than no safeguards at all.
Everything Apple says about sideloading is a lie to keep total control, stamping out competition, and maximize profits so there's absolutely zero reason to not have an optional sideloading toggle for those who want it.
Edit: And to those who keep disliking this post, see for yourself: Scam apps have figured out how to trick the App Store review team and it's getting worse. You are not immune to bad actors with the absence of sideloading like you think you are https://9to5mac.com/2022/08/04/fraudulent-chinese-apps-mac-app-store/