Advertising Malware Affects Non-Jailbroken iOS Devices

[wraggster]

Malware called YiSpecter is infecting iOS devices belonging to Chinese and Taiwanese users (http://www.bloomberg.com/news/articles/2015-10-05/iphones-at-risk-from-china-advertising-malware-researcher-says), and is the first piece of malware that successfully targets both jailbroken and non-jailbroken devices (http://researchcenter.paloaltonetworks.com/2015/10/yispecter-first-ios-malware-attacks-non-jailbroken-ios-devices-by-abusing-private-apis/), Palo Alto Networks researchers warn. What's more, the techniques it uses for hiding are making it difficult to squash the infection (http://www.net-security.org/malware_news.php?id=3121). YiSpecter's malicious apps were signed with three iOS enterprise certificates issued by Apple so that they can be installed as enterprise apps on non-jailbroken iOS devices via in-house distribution. Through this kind of distribution, an iOS app can bypass Apple's strict code review procedures and can invoke iOS private APIs to perform sensitive operations.

http://science.slashdot.org/story/15/10/05/1338236/majority-of-eu-nations-seek-opt-out-from-growing-gm-crops