Apple Issues Statement on iOS 'Masque Attack'

Following an alert from the U.S. government, Apple has issued a statement on 'Masque Attack', a hacking technique that exploits a vulnerability in iOS and allows an attacker to substitute malware for a legitimate app.

Apple told iMore:

"We designed OS X and iOS with built-in security safeguards to help protect customers and warn them before installing potentially malicious software," an Apple spokesperson told iMore. "We're not aware of any customers that have actually been affected by this attack. We encourage customers to only download from trusted sources like the App Store and to pay attention to any warnings as they download apps. Enterprise users installing custom apps should install apps from their company's secure website."


The company also posted a knowledge base article which warns users not to install apps from Untrusted Developers.

If you download an app and see an alert that identifies it as coming from an “Untrusted App Developer,” tap Don't Trust and delete the app from your device.

Never install apps from third-party websites or links you don't recognize and trust, even if the app name seems familiar.

You can learn more about how Masque Attack works here. Please follow iClarified on Twitter, Facebook, or RSS for updates.