Sideloading is a term used for downloading apps to your smartphone or tablet from somewhere other than the official app store for that device. For Apple iPhone users, this can only be done on jailbroken phones. Those who jailbreak phones typically want the flexibility to download apps from anywhere. With that flexibility comes risk, however. Hackers take advantage of this and researchers at Palo Alto Networks have announced that up to 225,000 of those who jailbroke their phones have become victims of a credential-stealing malware called KeyRaider.
The malware steals iTunes login details and sends it off to a remote server somewhere. In addition, it steals the payment data stored in the accounts. That information is offered up to pay for the "free" apps that are downloaded by users via a separate specific app. Unfortunately, free really means paid for by the 225,000 victims.
The malware hides in an app that promises to tweak the phones operating system in ways that the users find appealing. The affected users appear to mainly be in China, as that is where sideloading and downloading apps that offer more free apps is very popular. However, it does happen in the U.S. too.
The researchers in this case have called this the largest theft of Apple account information by malware currently known.
It is advised that no one jailbreak their phones in the first place. This opens the device up to additional risks like this one. It also eliminates the ability get support from Apple because jailbroken phones are not supported by Apple.
Also, even if you are a risk taker and insist upon jailbreaking, avoid sideloading. The official app store for Apple requires each app in it to be cryptographically signed by the company's key.
Even those who keep their phones intact and supported are advised to keep their phones updated with the current versions of the apps and operating systems and download an anti-malware app.
Unfortunately, stealing login information and payment details is not all this app can do. It may also hold the device ransom until money is paid. If this happens, it is not advised that the ransom be paid. Instead, ensure that regular and full backups of the phone are done so that it can be restored should something like this happen.
If you suspect you have downloaded KeyRaider, Palo Alto has listed steps for getting rid of it at its website.
For banks and credit unions
Share this article with your members
Copy a ready-made summary and link for your newsletter, website or social posts.
