Just last month, Apple has been met with the Xcode Ghost issue. Because app developers unknowingly used the malware, over two dozen infected Chinese apps have made their way into the app store. Apple Inc. has since removed the apps. On Monday, the Cupertino-based tech giant has again deleted a second batch of apps, which have been found to access and collect personal data.
According to a CNet report, over 250 apps have been deleted from the App Store. Most of them have been found to be Chinese apps, which use a software development kit. The particular SDK is provided by Youmi, a Chinese advertiser. The security blog puts the exact number at 256 apps, and their developers do not know that personal information such as user IDs and device serial numbers, have been accessed by the apps. On Monday, SourceDNA has sent a list of infected apps to the company.
Apple has since issued a statement saying it has already removed the apps in question. "This is a violation of our security and privacy guidelines," The company said about the issue. "The apps using Youmi's SDK will be removed from the App Store and any new apps submitted to the App Store using this SDK will be rejected."
The said apps have over 1 million users collectively, Source DNA reported. This is comparatively a large scale damage in the App Store, which has not seen serious security concerns over the years. The App Store is known to have solid security, with only five malware-infected apps making it into the App Store before the Xcode Ghost incident.
Having more than one million apps in the store, Apple is already strict with their guidelines for apps that are allowed in the app store. "We are working closely with developers to help them get updated versions of their apps that are safe for customers and in compliance with our guidelines back in the App Store quickly."
