Apple devs: Don’t let Apple’s Xcode validation scare you

The Apple App Store has long enjoyed a sterling reputation for screening out malware. But last weekend, the company pulled apps infected with XcodeGhost malware from the Chinese Apple App Store — infected apps that had apparently been created with a counterfeit version of Apple’s Xcode IDE by unsuspecting developers.

As a precaution, Apple emailed its developers on Tuesday, recommending that they validate their installed version of Xcode using a simple procedure to ensure it wasn’t a hacked version. The email also contained a reminder to “always download Xcode directly from the Mac App Store, or from the Apple Developer website, and leave Gatekeeper enabled on all your systems to protect against tampered software.”

To read this article in full or to leave a comment, please click here


RSS-3

Apple will host Xcode on Chinese servers following malware attack

091615-ios-9-no-hands-thumbnail-5

Apple’s developer software Xcode will soon be available to Chinese developers.

First spotted by Apple Insider, this news comes on the heels of a malware attack on apps in the App Store.

Last week, security researchers at Palo Alto Networks discovered the infected apps and publicized an analysis report detailing the malware’s spread and impact. Xcode is a set of software tools developers use to create iOS apps, but a modified version of Xcode containing the malware, dubbed XcodeGhost, made its way into the App Store.

As Palo Alto Networks explains, the standard Xcode installer is nearly 3GB, which means it could take even longer to download large files from Apple’s servers in other countries. In response to this, some Chinese developers choose to download the software from other sources or obtain copies from colleagues. It’s also hard for developers to detect malware like XcodeGhost because it’s deeply hidden. Read more…

More about Iphone, Apple, App Store, Tech, and Apps Software


RSS-3