Check whether ur iDevice infected by XcodeGhost

[badsector]

To check for the XcodeGhost Trojan!

open safari, go to the url "x.pangu.io"

 

[spidercyj]

XcodeGhost

http://flip.it/FpKaQ

Kinda scary

 

[macb0y]

http://www.macrumors.com/2015/09/20/xcodeghost-chinese-malware-faq/

U can check the affected apps.. Wechat kena also..

 

[ashhong]

it is kind of dumb to use unofficial xcode given that xcode is free from the app store.
and the result stated for doing so is because it take too long to download xcode from app store. so they are blaming apple for it.

 

[oceanxp]

Need to uninstall WeChat Liao ?

 

[ashhong]

Need to uninstall WeChat Liao ?

if there is an update to it, do update as soon as possible.

 

[chaicka]

Need to uninstall WeChat Liao ?

WeChat 6.2.5 affected but 6.2.6 has been released since 12th Sept and confirmed plunged off malware.

Here is a full list of affected apps and its version:
网易云音乐 2.8.3
微信 6.2.5
讯飞输入法 5.1.1463
滴滴出行 4.0.0.6-4.0.0.0
滴滴打车 3.9.7.1 – 3.9.7
铁路12306 4.5
下厨房 4.3.2
51卡保险箱 5.0.1
中信银行动卡空间 3.3.12
中国联通手机营业厅 3.2
高德地图 7.3.8
简书 2.9.1
开眼 1.8.0
Lifesmart 1.0.44
网易公开课 4.2.8
马拉马拉 1.1.0
药给力 1.12.1
喜马拉雅 4.3.8
口袋记账 1.6.0
同花顺 9.60.01
快速问医生 7.73
懒人周末
微博相机
豆瓣阅读
CamScanner
CamCard
SegmentFault 2.8
炒股公开课
股市热点
新三板
滴滴司机
OPlayer 2.1.05
电话归属地助手 3.6.5
Angry Bird 2 2.1.1
夫妻床头话 1.2
穷游 6.6.6
我叫MT 5.0.1
我叫MT 2 1.10.5
自由之战 1.1.0
Fox-IT (fox-it.com), a Netherlands based security company, checked all C2 domain names from our reports in their network sensors and has found thousands of malicious traffic outside China. According to their data, these iOS apps were also infected:
Mercury
WinZip
Musical.ly
PDFReader
guaji_gangtai en
Perfect365
网易云音乐
PDFReader Free
WhiteTile
IHexin
WinZip Standard
MoreLikers2
CamScanner Lite
MobileTicket
iVMS-4500
OPlayer Lite
QYER
golfsense
同花顺
ting
installer
下厨房
golfsensehd
Wallpapers10000
CSMBP-AppStore
礼包助手
MSL108
ChinaUnicom3.x
TinyDeal.com
snapgrab copy
iOBD2
PocketScanner
CuteCUT
AmHexinForPad
SuperJewelsQuest2
air2
InstaFollower
CamScanner Pro
baba
WeLoop
DataMonitor
爱推
MSL070
nice dev
immtdchs
OPlayer
FlappyCircle
高德地图
BiaoQingBao
SaveSnap
WeChat
Guitar Master
jin
WinZip Sector
Quick Save
CamCard

Source: Palo Alto Networks

 

[oric1]

To check for the XcodeGhost Trojan!

open safari, go to the url "x.pangu.io"

After going to that site, what are we suppose to do? Don't understand Chinese.

Is that site trustworthy?

Thanks.

 

[kopi22]

Wah. The impact is quite big wor. If whatsapp is infected, ho seh liao.

Sent from inside the toilet bowl taking upskirts using GAGT

 

[oric1]

Hope Apple can come out with an app to scan and flag out those affected app instead of relying on 3rd party.

 

[PetPet]

To be honest. There's no need to download that app to check the integrity of your device. Affected apps have since been removed/updated from/in the App Store

 

[oric1]

To be honest. There's no need to download that app to check the integrity of your device. Affected apps have since been removed/updated from/in the App Store

So what you're saying is that everything is taken care by Apple and there's no need for us to do anything? As long as any of our app is affected, it will auto update our devices with a clean copy?

 

[Crimsom]

siao liao i got a couple of apps in the list.

if i uninstall already, am i safe or the malware will continue to live in my device?

 

[PetPet]

Just update those apps and you'll be fine

 

[PumpkinX]

Even angry bird 2?!

 

[consigliere]

mercury browser nvr state which version?

 

[gkhchay]

After going to that site, what are we suppose to do? Don't understand Chinese.

Is that site trustworthy?

Thanks.

Download the app & run a scan with it, any infected apps will be highlighted.

It flashed out cam scanner & winzip in my case; deleted the infected apps.

 

[gkhchay]

mercury browser nvr state which version?

If it's the latest version it should be clear.

 

[gkhchay]

To be honest. There's no need to download that app to check the integrity of your device. Affected apps have since been removed/updated from/in the App Store

Nope! The app detected 2 infected apps in my case - cam scanner & winzip which I promptly deleted.

 

[kopi22]

Download the app & run a scan with it, any infected apps will be highlighted.

It flashed out cam scanner & winzip in my case; deleted the infected apps.

Just curious. How trustworthy is the scanner itself? Not that I'm doubting you. But there are lots of traps like this out there.

Sent from inside the toilet bowl taking upskirts using GAGT