New AceDeceiver Malware Affects Non-Jailbroken iOS Devices: Researchers t6f1u

Researchers claim to have found a new strain of malware that can infect a large pool of iPhone and iPad devices. The Apple has reportedly pulled three apps from the App Store that were believed to be from the AceDeceiver family. 55562e

AceDeceiver was designed to exploit a flaw in Apple's FairPlay digital rights management (DRM) protection mechanism, reports security firm Palo Alto Networks. The App Store by authenticating the purchase. The researchers say that there's a flaw in the authorisation process, which vicious minds behind AceDeceiver exploited.

The attackers were able to intercept a special code required by Apple for authorisation and used a compromised iTunes to trick iOS device into believing that the app or any other content was purchased from Apple's store. Attackers would then silently install AceDeceiver to the iOS device. Three compromised apps were ed to the App Store between July 2015 and February 2016, reports Palo Alto Networks.

"AceDeceiver is the first iOS malware we've seen that abuses certain design flaws in Apple's DRM protection mechanism -- namely FairPlay -- to install malicious apps on iOS devices regardless of whether they are jailbroken," Claud Xiao, a security researcher from Palo Alto Networks wrote in a blog post.

This is not the first iOS malware that we have seen in the recent times. Researchers found a strain of malware called targeted jailbroken as well as non-jailbroken devices in Taiwan and China. The app, however, leveraged private APIs that are signed with enterprise certificates to look authentic.

As for AceDeceiver, Palo Alto Networks note that only s in China seem to be affected for now. However, it adds, that with slight tweaks, s in other regions can also be targeted.

"Our analysis of AceDeceiver leads us to believe FairPlay MITM attack will become another popular attack vector for non-jailbroken iOS devices - and thus a threat to Apple device s worldwide," Xiao said.