Into the Breach instal the new version for apple

WireLurker is capable of stealing a variety of information from the mobile devices it infects and regularly requests updates from the attackers command and control server. We also detail Palo Alto Networks Enterprise Security Platform protections in place to counter associated risk. We further describe WireLurker’s potential impact, as well as methods to prevent, detect, contain and remediate the threat.

In this whitepaper, we explain how WireLurker is delivered, the details of its malware progression, and specifics on its operation. WireLurker exhibits complex code structure, multiple component versions, file hiding, code obfuscation and customized encryption to thwart anti-reversing. Researchers have demonstrated similar methods to attack non-jailbroken devices before however, this malware combines a number of techniques to successfully realize a new brand of threat to all iOS devices. This is the reason we call it “wire lurker”. WireLurker monitors any iOS device connected via USB with an infected OS X computer and installs downloaded third-party applications or automatically generated malicious applications onto the device, regardless of whether it is jailbroken. In the past six months, these 467 infected applications were downloaded over 356,104 times and may have impacted hundreds of thousands of users. WireLurker was used to trojanize 467 OS X applications on the Maiyadi App Store, a third-party Mac application store in China. It is the first in-the-wild malware to install third-party applications on non-jailbroken iOS devices through enterprise provisioning.

It is the first known malware that can infect installed iOS applications similar to a traditional virus.It is the first malware to automate generation of malicious iOS applications, through binary file replacement.It is only the second known malware family that attacks iOS devices through OS X via USB.Of known malware families distributed through trojanized / repackaged OS X applications, it is the biggest in scale we have ever seen.We believe that this malware family heralds a new era in malware attacking Apple’s desktop and mobile platforms based on the following characteristics: Today we published a new research paper on WireLurker, a family of malware targeting both Mac OS and iOS systems for the past six months.

Into the Breach instal the new version for apple