Geo targeted Apple IOS Virus

[suityou01]

Advanced iOS virus targeting Hong Kong protestors -security firm | Reuters

(Reuters) - Cybersecurity researchers have uncovered a computer virus that spies on Apple Inc's iOS operating system for the iPhone and iPad, and they believe it is targeting pro-democracy protesters in Hong Kong.

The malicious software, known as Xsser, is capable of stealing text messages, photos, call logs, passwords and other data from Apple mobile devices, researchers with Lacoon Mobile Security said on Tuesday.

So not only do Apple products seemingly get viruses (I am part of the gurning masses that believe it was not possible) but also you can home in on a particular area and specific devices.

I'm guessing the NSA have had this technology for a while, but for me this is new to the wild.

Thoughts?

[DiscoStu]

Nowhere near as hysterical as your usual posting style, must try harder.

[suityou01]

Nowhere near as hysterical as your usual posting style, must try harder.

Forgot to work in the MCaans somehow I suppose

[TheCyclingProgrammer]

I'm intrigued to know how this "virus" is spreading as iOS is pretty locked down.

According to the researchers page, it appears your device needs to be jail-broken in order for the device to be compromised, as it uses Cydia to distribute the malware:

https://www.lacoon.com/lacoon-discov...ed-ios-trojan/

So...not a virus, but malware installed through a backdoor that users have to willingly open in the first place. Not quite the same thing.

[NickFitz]

Not only does it require the user to jailbreak their phone and install it, it also hasn't actually been seen in the wild, according to its discoverers. They only say they've found a copy on a command & control server used by the Android malware from which it's derived, which has been seen in the wild.

(See the article linked to by TCP above for details.)

EDIT: oh, and I don't see anything to suggest it's a virus, other than somebody at Reuters using the word when they don't know what it means: it's a Remote Access Tool. Nothing in the description of it suggests it can spread itself unaided. (I see Reuters managed to get virus, spyware, malware, and Trojan into the article. I'm pretty sure it's not all of them.)

[oracleslave]

Can you get rid of it with soap & water like you can with Ebola?

Just asking like.

It's garlic, potatoes and a shower you numpty. Or is that aids? This syphilis has riddled my brain

[suityou01]

Not only does it require the user to jailbreak their phone and install it, it also hasn't actually been seen in the wild, according to its discoverers. They only say they've found a copy on a command & control server used by the Android malware from which it's derived, which has been seen in the wild.

(See the article linked to by TCP above for details.)

EDIT: oh, and I don't see anything to suggest it's a virus, other than somebody at Reuters using the word when they don't know what it means: it's a Remote Access Tool. Nothing in the description of it suggests it can spread itself unaided. (I see Reuters managed to get virus, spyware, malware, and Trojan into the article. I'm pretty sure it's not all of them.)

I beg to differ. It says it is a trojan, as in it is spread by being disguised as an app, which the user can download. If a virus were to propagate by itself that would be a worm, but a virus can exist without self propagation capability.

The jailbreaking I can't of course disagree with.

HTH

[stek]

I beg to differ. It says it is a trojan, as in it is spread by being disguised as an app, which the user can download. If a virus were to propagate by itself that would be a worm, but a virus can exist without self propagation capability.

The jailbreaking I can't of course disagree with.

HTH

You can only downloads apps from Apple tho, unless your iPhone is jail broken...

[suityou01]

You can only downloads apps from Apple tho, unless your iPhone is jail broken...

Very good.

[Platypus]

Our resident security expert speaks.

By the way, did I miss the end of the world last week with Shellshock?