It is currently 20-10-2017 06:27

Over 75 million iOS devices infected by adware

Over 75 million iOS devices infected by adware

by sigismund » 2016-09-13 16:08:37


third-Party service uses equipment Apple allowed sideloading.


According to experts from Trend Micro, more than 75 million iOS devices infected by adware distributed by Chinese app store Haima. The service uses equipment sideloading apps (side-loading), allowing owners of Apple devices to install applications from unofficial sources.

Apple supports side-loading for corporate market in order to provide employees of private companies the opportunity to use the prerequisite custom applications that are not in the App Store. Typically, these programs contain corporate information, and Apple will only benefit from side-loading, as in this case the device can be used by employees in the workplace.

Chinese service of Haima uses side-loading to spread adware. The process of installing applications is very complex and is based on newly released Apple enterprise certificates. Usually, scammers lead consumers to undergo the whole procedure, using social engineering techniques.

In the case of Haima service switches from one corporate certificate to another every three days, as Apple routinely blocks fake certificates. As a rule, criminals buy stolen certificates on underground hacker forums. The average product price is about $300 – quite a bit, considering how much Haima earns on advertising.
As explained by the experts at Trend Micro, all distributed via Haima applications contain dynamic code that displays advertising, usually from AdMob, Mobvista, Adsailer, Chance, DianRu and Baidu. In some cases (for example, in "clone" Pokemon GO) this code also introduces the fake GPS data, providing users with the ability to play even in unsupported regions. This implies that the process is not automated, and the developers to manually implement code in the application.

According to Trend Micro, a total of Haima has been downloaded 75 million applications. Over 68,87 million users have uploaded a modified version of Minecraft Pocket Edition, more than 6 million – and 1 million – Pokemon GO.
sigismund
moderators
Сообщений: 788
Депозит: 0 BTC

Rating: 5