US Gov't Issues Alert About iOS "Masque Attack" Threat

[wraggster]

Three days after security company FireEye warned of an iPhone/iPad threat dubbed "Masque Attack", the U.S. government has issued a warning of its own (http://www.networkworld.com/article/2847857/mobile-security/u-s-government-issues-alert-about-apple-ios-masque-attack-threat.html) about this new risk by malicious third-party apps to Apple iOS devices. US-CERT warned (https://www.us-cert.gov/ncas/alerts/TA14-317A): "This attack works by luring users to install an app from a source other than the iOS App Store or their organizations' provisioning system. In order for the attack to succeed, a user must install an untrusted app, such as one delivered through a phishing link." Revelations of Masque came on the heels of a related exploit (that also threatens Macs) called WireLurker.

http://apple-beta.slashdot.org/story/14/11/13/2246246/us-govt-issues-alert-about-ios-masque-attack-threat