6 ms·

Isn't this the "App Store" that they are gate keeping for this kinds of threats?

by fsniper 3y ago

chrisjj 3y ago
Perhaps the Store found no threat? Do note that this article fails to actually identify any threat here.
- tailspin2019 3y ago
  It's not difficult to imagine possible threats just by looking at the comparison screenshots alone: https://blog.lastpass.com/2024/02/warning-fraudulent-app-impersonating-lastpass-currently-available-in-apple-app-store/ https://blog.lastpass.com/2024/02/warning-fraudulent-app-imp...
  - chrisjj 3y ago
    App Store does not ban an app for threats imagined from viewing a competitor's screenshots.
    - lapcat 3y ago
      Apple has removed the app from the store: https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as-password-manager-lastpass-just-got-pulled-from-the-app-store/ https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as...
      - chrisjj 3y ago
        > Apple has removed the app Fake news. Article does not say Apple removed it. On the contrary: "whether by Apple or the fake app’s developer is yet unclear — Apple has not commented."
- Pfhortune 3y ago
  > Do note that this article fails to actually identify any threat here. From the article: > ...the app was likely created to act as a phishing app and steal credentials. > If you have installed the fake LastPass app, you should immediately remove it and change your password at lastpass.com. It is then advised to perform the arduous task of resetting all passwords stored in your LastPass vault to be safe. Though one could argue that they have not _definitively_ proven that this app is a threat through testing, it really is not much of a stretch of the imagination that a LastPass-lookalike would be used for phishing. This app is very clearly an illegitimate clone.
  - chrisjj 3y ago
    > ...the app was likely created to act as a phishing app and steal credentials. That a fear, not a threat. > Though one could argue that they have not _definitively_ proven that this app is a threat Why bother arguing that? They haven't claimed any evidence, let alone proof. > it really is not much of a stretch of the imagination that a LastPass-lookalike would be used for phishing. App Store rightly does not ban apps on stretches of imagination.
    - lapcat 3y ago
      > App Store rightly does not ban apps on stretches of imagination. Apple has removed the app: https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as-password-manager-lastpass-just-got-pulled-from-the-app-store/ https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as...
      - chrisjj 3y ago
        > Apple has removed the app Fake news. Article does not say Apple removed it. On the contrary: "whether by Apple or the fake app’s developer is yet unclear — Apple has not commented."
        lapcat 3y ago
        Apple never comments on that, but somehow magically every single time a scam app makes the news media, the app disappears from the App Store.
- phmqk76 3y ago
  And yet Apple removed it after it was publicized, so…
  - chrisjj 3y ago
    There is no evidence Apple did.
    - phmqk76 3y ago
      Circumstantial evidence is still evidence, Chris. The fact that it was no longer available on the store tends to imply that Apple removed it. Especially since the alternative is that the developer, who clearly acted in bad faith publishing an app masquerading as another app for the purpose of tricking people into making that developer profit, pulled it himself. You can put on your big boy deductive reasoning hat and draw a pretty reliable inference. Or you can simply read: https://www.pcmag.com/news/beware-theres-a-fake-lastpass-app-on-apples-app-store https://www.pcmag.com/news/beware-theres-a-fake-lastpass-app... UPDATE 2/9: Apple has removed the "LassPass" app from its App Store and also pulled the app's developer from its developer program, the company confirms to PCMag. Apple says it has also received a trademark dispute against the now-removed app.
      - chrisjj 3y ago
        https://www.pcmag.com/news/beware-theres-a-fake-lastpass-app-on-apples-app-store https://www.pcmag.com/news/beware-theres-a-fake-lastpass-app... That (belatedly) is evidence. Thanks. So much for the claim hereabouts that Apple never comments on removals...

Isn't this the "App Store" that they are gate keeping for this kinds of threats?

chrisjj 3y ago

Perhaps the Store found no threat? Do note that this article fails to actually identify any threat here.

tailspin2019 3y ago
It's not difficult to imagine possible threats just by looking at the comparison screenshots alone: https://blog.lastpass.com/2024/02/warning-fraudulent-app-impersonating-lastpass-currently-available-in-apple-app-store/ https://blog.lastpass.com/2024/02/warning-fraudulent-app-imp...
- chrisjj 3y ago
  App Store does not ban an app for threats imagined from viewing a competitor's screenshots.
  - lapcat 3y ago
    Apple has removed the app from the store: https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as-password-manager-lastpass-just-got-pulled-from-the-app-store/ https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as...
    - chrisjj 3y ago
      > Apple has removed the app Fake news. Article does not say Apple removed it. On the contrary: "whether by Apple or the fake app’s developer is yet unclear — Apple has not commented."
Pfhortune 3y ago
> Do note that this article fails to actually identify any threat here. From the article: > ...the app was likely created to act as a phishing app and steal credentials. > If you have installed the fake LastPass app, you should immediately remove it and change your password at lastpass.com. It is then advised to perform the arduous task of resetting all passwords stored in your LastPass vault to be safe. Though one could argue that they have not _definitively_ proven that this app is a threat through testing, it really is not much of a stretch of the imagination that a LastPass-lookalike would be used for phishing. This app is very clearly an illegitimate clone.
- chrisjj 3y ago
  > ...the app was likely created to act as a phishing app and steal credentials. That a fear, not a threat. > Though one could argue that they have not _definitively_ proven that this app is a threat Why bother arguing that? They haven't claimed any evidence, let alone proof. > it really is not much of a stretch of the imagination that a LastPass-lookalike would be used for phishing. App Store rightly does not ban apps on stretches of imagination.
  - lapcat 3y ago
    > App Store rightly does not ban apps on stretches of imagination. Apple has removed the app: https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as-password-manager-lastpass-just-got-pulled-from-the-app-store/ https://techcrunch.com/2024/02/08/a-fake-app-masquerading-as...
    - chrisjj 3y ago
      > Apple has removed the app Fake news. Article does not say Apple removed it. On the contrary: "whether by Apple or the fake app’s developer is yet unclear — Apple has not commented."
      - lapcat 3y ago
        Apple never comments on that, but somehow magically every single time a scam app makes the news media, the app disappears from the App Store.
phmqk76 3y ago
And yet Apple removed it after it was publicized, so…
- chrisjj 3y ago
  There is no evidence Apple did.
  - phmqk76 3y ago
    Circumstantial evidence is still evidence, Chris. The fact that it was no longer available on the store tends to imply that Apple removed it. Especially since the alternative is that the developer, who clearly acted in bad faith publishing an app masquerading as another app for the purpose of tricking people into making that developer profit, pulled it himself. You can put on your big boy deductive reasoning hat and draw a pretty reliable inference. Or you can simply read: https://www.pcmag.com/news/beware-theres-a-fake-lastpass-app-on-apples-app-store https://www.pcmag.com/news/beware-theres-a-fake-lastpass-app... UPDATE 2/9: Apple has removed the "LassPass" app from its App Store and also pulled the app's developer from its developer program, the company confirms to PCMag. Apple says it has also received a trademark dispute against the now-removed app.
    - chrisjj 3y ago
      https://www.pcmag.com/news/beware-theres-a-fake-lastpass-app-on-apples-app-store https://www.pcmag.com/news/beware-theres-a-fake-lastpass-app... That (belatedly) is evidence. Thanks. So much for the claim hereabouts that Apple never comments on removals...