4 ms·
In 2015, a malicious copy of Xcode, XcodeGhost, also performed a similar attack and infected iOS apps from a dozen of software companies in China. Globally, 400
by segfaultbuserr 4y ago
In 2015, a malicious copy of Xcode, XcodeGhost, also performed a similar attack and infected iOS apps from a dozen of software companies in China. Globally, 4000 apps were found to be affected. It was not a true Thompson Trojan, as it doesn't infect development tools themselves, but it did show toolchain poisoning can indeed cause substantial damages.
https://en.wikipedia.org/wiki/XcodeGhost https://en.wikipedia.org/wiki/XcodeGhost
- cduzz 4y agoAh, but was a version of Xcode compiled with this version, and did that child version of Xcode also have the trojan code?
- segfaultbuserr 4y agoVery unlikely, and I don't know any Xcode that runs on iOS on mobile devices, so I said it was not a true Thompson Trojan.
- scoot 4y agoWas it "a dozen software companies", or "dozens of software companies"? The current wording says neither.