List of 85 Legitimate iPhone Apps Infected by the Recent App Store Hack [Follow-up]

[dgstorm]

Here's a quick follow-up article regarding the recent hacking of the Apple App Store. The following is a list of legitimate iPhone apps infected by the XcodeGhost malware hack. You may want to peruse this list to see if use any of these apps. If you have any of these apps, it might be a good idea to uninstall them until Apple and the developers sort this nonsense out.

Since it is so long, we included the list in the thread below.

 

[dgstorm]

Here's that list of legit apps on the Apple App store which have the malicious hacking code:

1. air2
2. AmHexinForPad
3. Angry Birds 2
4. baba
5. BiaoQingBao
6. CamCard
7. CamScanner
8. CamScanner Lite
9. CamScanner Pro
10. Card Safe
11. China Unicom Mobile Office
12. ChinaUnicom3.x
13. CITIC Bank move card space
14. CSMBP-AppStore
15. CuteCUT
16. DataMonitor
17. Didi Chuxing
18. Eyes Wide
19. FlappyCircle
20. Flush
21. Freedom Battle
22. golfsense
23. golfsensehd
24. guaji_gangtai en
25. Guitar Master
26. High German map
27. Himalayan
28. Hot stock market
29. I called MT
30. I called MT 2
31. IFlyTek input
32. IHexin
33. immtdchs
34. InstaFollower
35. installer
36. iOBD2
37. iVMS-4500
38. Jane book
39. jin
40. Lazy weekend
41. Lifesmart
42. Mara Mara
43. Marital bed
44. Medicine to force
45. Mercury
46. Micro Channel
47. Microblogging camera
48. MobileTicket
49. MoreLikers2
50. MSL070
51. MSL108
52. Musical.ly
53. NetEase
54. nice dev
55. OPlayer
56. OPlayer Lite
57. PDFReader
58. PDFReader Free
59. Perfect365
60. Pocket billing
61. PocketScanner
62. Poor tour
63. Quick asked the doctor
64. Quick Save
65. QYER
66. Railway 12306
67. SaveSnap
68. SegmentFault
69. snapgrab copy
70. Stocks open class
71. SuperJewelsQuest2
72. Telephone attribution assistant
73. The driver drops
74. The Kitchen
75. Three new board
76. ting
77. TinyDeal.com
78. Wallpapers10000
79. Watercress reading
80. WeChat
81. WeLoop
82. WhiteTile
83. WinZip
84. WinZip Sector
85. WinZip Standard

 

[Kayayem]

I have at some point used 3 of these apps....
I have PDFReader on my iPad... or at least, an app with that name. (I've seens different apps with same name). As for Angry Birds 2, I believe that was only the Chinese version.

 

[twerppoet]

Apple is supposed to have removed the infected apps from the store.

I see that the Mercury Web Browser is still there. My guess is that this means either than Mercury is a different app, or the most recent version of Mercury Web Browser is clean. (seems to me I saw a different, now absent, Mercury app just the other day, when I doing some research for a different question).

I thought I'd mention this because I know a lot of our users have and use the Mercury Web Browser. Panic seems unnecessary, but it might be a good idea to avoid going to sensitive sites with Mercury until we hear more. Also, make sure you are using the most recent version.

 

[Kayayem]

Panic seems unnecessary, but it might be a good idea to avoid going to sensitive sites with Mercury until we hear more. Also, make sure you are using the most recent version.

Yup...and common sense. I have used PDFReader to access DropBox. So change my DB password.

 

[NSquirrel]

The list is not much help without version info.

I have Mercury, but the older version (9.1.0) which has not been updated since it appears it was taken over and renamed and hence no longer automatically updated.

 

[dgstorm]

Yeah... version info would be handy, but we were not able to find that info at the time of the post. At least this list can point you in the direction of which apps you might use and need to research to see if they were the affected versions.

 

[NSquirrel]

Thanks dgstorm. No criticism meant of your post, in fact thanks for posting it. As you say, it is a pointer.

 

[scifan57]

This is how Apple notified the developers of the affected apps.