Apple has removed an application collecting users' address book contacts from its App Store, which was taken as the first instance of iOS App Store's malware.
"The Find & Call app has been removed from the App Store due to its unauthorized use of users' Address Book data, a violation of App Store guidelines," Apple said in a statement to tech blog The Loop.
"Find & Call" was first reported Monday by Russian security firm Kaspersky Lab,
which said it was alerted to a suspicious app both available in Apple's App Store and Google's online store Google Play that had been collecting users' address book contacts and sending them to the developer's servers, reported Xinhua.
The developer's system then sent spam text messages of the app's URL to those contacts, which are shown to be sent "from" the original user's mobile phone number.
According to the screenshots before the app was removed, all user comments both in Apple's App Store and Google Play are quite angry, complaining that the app sends SMS (Short Message Service) spam.
The app so far only targeted Russian users since it uses Russian in the app description, but the app was available in App Store around the world.
"Malware in the Google Play is nothing new but it's the first case that we've seen malware in the Apple App Store. It is worth mentioning that there have not been any incidents of malware inside the iOS Apple App Store since its launch 5 years ago," said the Kaspersky Lab in its blog.
The lab noted that it is the first time that they confirmed a case of malicious usage of users' personal data.
The news also piles on top of more bad news for the App Store, which has been plagued by a problem that has led to many recently updated apps being issued corrupted from the digital store. Those corrupted apps haven't caused any damage to users, but they do keep making the apps crash -- and that's led to a lot of one-star ratings for many developers.
"The Find & Call app has been removed from the App Store due to its unauthorized use of users' Address Book data, a violation of App Store guidelines," Apple said in a statement to tech blog The Loop.
"Find & Call" was first reported Monday by Russian security firm Kaspersky Lab,
which said it was alerted to a suspicious app both available in Apple's App Store and Google's online store Google Play that had been collecting users' address book contacts and sending them to the developer's servers, reported Xinhua.
The developer's system then sent spam text messages of the app's URL to those contacts, which are shown to be sent "from" the original user's mobile phone number.
According to the screenshots before the app was removed, all user comments both in Apple's App Store and Google Play are quite angry, complaining that the app sends SMS (Short Message Service) spam.
The app so far only targeted Russian users since it uses Russian in the app description, but the app was available in App Store around the world.
"Malware in the Google Play is nothing new but it's the first case that we've seen malware in the Apple App Store. It is worth mentioning that there have not been any incidents of malware inside the iOS Apple App Store since its launch 5 years ago," said the Kaspersky Lab in its blog.
The lab noted that it is the first time that they confirmed a case of malicious usage of users' personal data.
The news also piles on top of more bad news for the App Store, which has been plagued by a problem that has led to many recently updated apps being issued corrupted from the digital store. Those corrupted apps haven't caused any damage to users, but they do keep making the apps crash -- and that's led to a lot of one-star ratings for many developers.
0 comments:
Post a Comment