O spyware Exodus foi assinado com certificados legítimos de desenvolvedor da Apple.
The government spyware Exodus, que foi encontrado anteriormente em 25 diferentes aplicativos no Google Play, agora também é portado para iOS. Este é um aviso que os pesquisadores observam sobre segurança.O Spy Exodus pode extrair contatos do usuário, gravar conversas, interceptar fotos e rastrear a localização. De acordo com os especialistas, the iOS version of this program has appeared in nature.
It is distributed bypassing the App Store – through phishing sites that mimic the official resources of mobile operators. Lookout Security experts believe that this program has been under development for at least five years.
Investigating the Android version of this malware, the experts came across several samples of the same program under the iOS system. Further research has shown that this version of the spy extends to phishing sites.
The Exodus developers went further – they became part of the Apple Developer Enterprise program, in order to be able to sign their applications with legitimate certificates from Apple.
Claro, the use of Apple certificates for malicious purposes is a violation of the Apple Developer Enterprise program. The American corporation has already withdrawn all affected certificates.
Fonte: https://threatpost.com/exodus-spyware-apple-ios/143544/
