XcodeGhost
MITRE ATT&CK: S0297 View on attack.mitre.org
- First seen
- 2015-09-01 00:00:00
- Malware type
- trojan
- Family
- Malware family
- Profile updated
- 2026-07-07 15:31:13
Targeted industries: technology-and-telecommunications retail-and-hospitality
Targeted regions: country_code:cn
Context
XcodeGhost is iOS malware that infected at least 39 iOS apps in 2015 and potentially affected millions of users.
Malware & tools used
- GUI Input Capture (attack-pattern)
- Clipboard Data (attack-pattern)
- Compromise Software Dependencies and Development Tools (attack-pattern)
Reports & references
- researchcenter.paloaltonetworks.com — Novel Malware Xcodeghost Modifies Xcode Infects Apple Ios Apps And Hits App Store (report)
- researchcenter.paloaltonetworks.com — Update Xcodeghost Attacker Can Phish Passwords And Open Urls Though Infected Apps (report)
- MITRE ATT&CK — S0297 (report)