Close X
Saturday, November 16, 2024
ADVT 
National

Apple Security Breach Could Impact Canadians With iPhones And iPads

The Canadian Press, 21 Sep, 2015 12:28 PM
    TORONTO — Apple announced a rare security breach over the weekend that means some Canadians may have unwittingly infected their iPhones and iPads with malware that could expose their iCloud passwords and other personal data.
     
    Apple Inc. has removed some applications from its app store after developers in China were tricked into using software tools that added malicious code to their work.
     
    Apple hasn't provided details about which companies' apps were affected.
     
    But Tencent Ltd. said its popular WeChat app was hit; the company released a new version after spotting the offending code. Chinese news reports said others affected included banks, an airline and a popular music service.
     
    Many of the affected apps were only available on the App Store in China, yet some that were reportedly infected by the malware — including WeChat, business card rolodex CamCard and file extractor WinZip — are available in Canada.
     
    Users are advised to uninstall the affected apps or update to the latest version released after the malware was discovered, and to change their iCloud passwords.
     
    The malicious code spread through a counterfeit version of Apple's Xcode tools used to create apps for its iPhones and iPads, according to the company. It said the counterfeit tools spread when developers obtained them from "untrusted sources" rather than directly from the company.
     
     
    The malicious software collects information from infected devices and uploads it to outside servers, according to Palo Alto Networks, a U.S.-based security firm. The company said the breach could result in fake password prompts aimed at harvesting iCloud details or other logins.
     
    It was first publicized last week by security researchers at Alibaba Group, the Asian e-commerce giant, who dubbed it XcodeGhost.
     
    The creators of the malware took advantage of public frustration with Beijing's Internet filters, which hamper access to Apple and other foreign websites. That prompts some people to use copies of foreign software or documents that are posted on websites within China to speed up access.
     
    "Sometimes network speeds are very slow when downloading large files from Apple's servers," wrote Claud Xiao, a Palo Alto Networks researcher, on its website. Due to the large size of the Xcode file, "some Chinese developers choose to download the package from other sources or get copies from colleagues."
     
    Companies with apps that were affected include taxi-hailing service Didi Kuaidi, Citic Industrial Bank, China Southern Airlines and the music service of NetEase, a popular Web portal, according to the newspaper Yangcheng Evening News.
     
     
    The incident is the only the sixth time malicious software is known to have made it through Apple's screening process for products on its App Store, according to Xiao.

    MORE National ARTICLES

    Alberta Prisoner Dies After Overdose, Four Others Sent To Hospital

    Alberta Prisoner Dies After Overdose, Four Others Sent To Hospital
    Ryan William Witvoet, who was 31, was found unresponsive in a cell at the maximum-security Edmonton Institution on Thursday.

    Alberta Prisoner Dies After Overdose, Four Others Sent To Hospital

    Scouts Canada Says B.C. Event With Harper Broke Non-Partisan Policy

    Scouts Canada Says B.C. Event With Harper Broke Non-Partisan Policy
    OTTAWA — Scouts Canada officials say they didn't agree to have some of their young members stand in uniform alongside Conservative Leader Stephen Harper during a campaign stop earlier today.

    Scouts Canada Says B.C. Event With Harper Broke Non-Partisan Policy

    Margaret Atwood Column On Harper Hair Disappears, Then Reappears

    Margaret Atwood Column On Harper Hair Disappears, Then Reappears
    Atwood's piece was back on the newspaper's main page late Friday after being taken down mid-afternoon. The Post said in an email it was held for fact checking.

    Margaret Atwood Column On Harper Hair Disappears, Then Reappears

    Cement, Steel Groups Say Quebec Risking Safety By Allowing Taller Wood Buildings

    Cement, Steel Groups Say Quebec Risking Safety By Allowing Taller Wood Buildings
    MONTREAL — Canada's cement and steel sectors say Quebec is favouring one industry and possibly putting public safety at risk by allowing wood to be used in the construction of buildings up to 12 storeys high.

    Cement, Steel Groups Say Quebec Risking Safety By Allowing Taller Wood Buildings

    Municipalities Unprepared For 'Weather Whiplash,' Warns Top Meteorologist

    Municipalities Unprepared For 'Weather Whiplash,' Warns Top Meteorologist
    HALIFAX — A top Canadian meteorologist warns that municipalities aren't prepared to deal with the impacts of an increasingly volatile climate that can bring devastating floods one season and a drought the next.

    Municipalities Unprepared For 'Weather Whiplash,' Warns Top Meteorologist

    How A Reclusive Rural Manitoba Woman Scammed An NBA Star, Others

    How A Reclusive Rural Manitoba Woman Scammed An NBA Star, Others
    A woman who rarely left her house in northern Manitoba has admitted to impersonating several people online — including a professional athlete  — so she could receive money and gifts and live in a world of celebrity fantasy.

    How A Reclusive Rural Manitoba Woman Scammed An NBA Star, Others