Latest in Gear

Image credit:

Android spyware Exodus makes the leap to iOS devices

The exploit has only been found in third-party app stores.
AJ Dellinger, @ajdell
April 9, 2019
Share
Tweet
Share

Sponsored Links

NurPhoto via Getty Images

Researchers at security firm Lookout recently discovered an iOS version of Exodus spyware that typically targets Android devices. Before you go wiping your iPhone to ensure you aren't being spied on, it's worth noting that the iOS version of the malware has only been found in third-party app marketplaces and hasn't made its way into the walled garden that is Apple's official App Store.

According to Lookout, Exodus for iOS was found on a number of phishing sites that were designed to trick customers of mobile carriers in Italy and Turkmenistan. The spyware was determined to be a stripped down port of the Android version. If installed on a device, the malicious software could steal contacts, photos, videos and audio recordings, GPS information and device location data. An attacker could use the app also perform on-demand audio recordings. The iOS variant of Exodus uploaded the stolen information to the same server as the Android malware, suggesting a direct connection between the attacks.

The Exodus attack initially used enterprise certificates signed by Apple, which made it possible for victims to install the app on their device despite downloading it outside of the App Store. Apple has since revoked those certificates, meaning the attack has largely been squashed. Still, it's a good reminder that iOS devices aren't immune to attacks. It's best to stick to Apple's official App Store to avoid falling victim to spyware.

In this article: apple, exodus, gear, ios, lookout, security, spyware
All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

Engadget's 2020 Back-to-School Guide

Engadget's 2020 Back-to-School Guide

View
Apple Watch Series 5 drops to $299 at Walmart

Apple Watch Series 5 drops to $299 at Walmart

View
These AI-generated tennis matches are both eerie and impressive

These AI-generated tennis matches are both eerie and impressive

View
DC Universe content is 'migrating' to HBO Max

DC Universe content is 'migrating' to HBO Max

View
Facebook forms financial group to focus on payments

Facebook forms financial group to focus on payments

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr