New case of data theft among iPhone users
In Apple they don't win for scares lately. And it seems that they are going through low hours in terms of security and quality controls Something that directly clashes against their image, built on the basis ofrestrictions in order to ensure the quality of both the applications that are distributed through theApp Store, as to safeguard users from any danger in the form of virusQuestion in which they have failed again this month with a new leak of a virus capable of stealing important user data.
Of course, once again, it was Apple who raised the alarm after finding this vulnerability, taking action immediately to try to prevent a greater evil. Something that has resulted in the elimination of some 250 applications from the App Store, most of them focused on the Asian market And it seems that their opening to China is giving them more than one headache. The problem resides in an SDK or software development kit (application creation tool) centered on the , which is capable ofcollect user information and send it directly to a server
According to Apple, the SDK is Developed by Youmi, a mobile provider.Thus, the applications that have this tool inside have been responsible for accessing data such as email or user ID, and send them later to the company of . A very skilful trick that is surprising, above all, for having happened right under the noses of Apple without its security and quality systems detecting anything. This being the real problem, beyond the compromised situation for users who have used these applications.
Another important point is that these more than 250 removed applications come from the Chinese market, where they have been downloaded several million times Thus, it is possible that many user contact details have been leaked, and are circulating on Internetor on the servers of a company that, surely, will know how to take economic advantage of them.
In any case, and even though Apple systems have failed to detect and prevent the problem, they have worked to avoid a greater evil, reacting afterwards and taking action on the matter. Thus, they also claim to be working with the developers of many of these applications to be able to return them to the App Store as soon as possible , but without any SDK or tools for malicious purposes and in violation of 's app store usage policies Apple Of course the damage has already been done. Both to the users whose data has been compromised, and to the developers who, voluntarily or no, they have used this SDK and have been left without their app for several days outside the App Store, like herself Apple, which can no longer boast of being an impregnable bastion
