.༼-◕_◕-༽.
.༼-◕_◕-༽.
Apple removes 250 apps from its store that secretly accessed users' personal data
BY Alejandro Alba
NEW YORK DAILY NEWS
Monday, October 19, 2015, 4:13 PM
ROBERT GALBRAITH/REUTERS
Apple deleted 250 apps with malware.
Apple is removing 250 apps from the App Store because they were secretly accessing users' personal information.
The apps were using software from a Chinese advertising firm called Youmi, which not only accessed personal data, but it would store it as well. The firm was providing app makers with a software development kit that would track users' downloads, store email addresses and smartphone's serial numbers.
SourceDNA, a mobile security company, was the first to notice the malware while updating its own product Searchlight, which inspects apps for security and privacy violations. SourceDNA said that the apps with the Chinese SDK received a total of 1 million downloads.
POPULAR AD BLOCKER APP PEACE PULLED FROM APP STORE 2 DAYS AFTER RELEASE
"We believe the developers of these apps aren't aware of this since the SDK is delivered in binary form, obfuscated and user info is uploaded to Youmi's server, not the app's," SourceDNA said in a company blog. "We recommend developers stop using this SDK until this code is removed."
Once Apple caught wind of the news, it proceeded by removing all apps using Youmi's SDK.
"This is a violation of our security and privacy guidelines," Apple said in a statement. "The apps using Youmi's SDK have been removed from the App Store and any new apps submitted to the App Store using this SDK will be rejected.
Apple is also working with developers to help them update their apps with SDKs that are safe for customers and are in compliance with the App Store
BY Alejandro Alba
NEW YORK DAILY NEWS
Monday, October 19, 2015, 4:13 PM
Apple deleted 250 apps with malware.
Apple is removing 250 apps from the App Store because they were secretly accessing users' personal information.
The apps were using software from a Chinese advertising firm called Youmi, which not only accessed personal data, but it would store it as well. The firm was providing app makers with a software development kit that would track users' downloads, store email addresses and smartphone's serial numbers.
SourceDNA, a mobile security company, was the first to notice the malware while updating its own product Searchlight, which inspects apps for security and privacy violations. SourceDNA said that the apps with the Chinese SDK received a total of 1 million downloads.
POPULAR AD BLOCKER APP PEACE PULLED FROM APP STORE 2 DAYS AFTER RELEASE
"We believe the developers of these apps aren't aware of this since the SDK is delivered in binary form, obfuscated and user info is uploaded to Youmi's server, not the app's," SourceDNA said in a company blog. "We recommend developers stop using this SDK until this code is removed."
Once Apple caught wind of the news, it proceeded by removing all apps using Youmi's SDK.
"This is a violation of our security and privacy guidelines," Apple said in a statement. "The apps using Youmi's SDK have been removed from the App Store and any new apps submitted to the App Store using this SDK will be rejected.
Apple is also working with developers to help them update their apps with SDKs that are safe for customers and are in compliance with the App Store
