XCodeGhost

The attacker could distribute a fake version of developer tools used by iOS developers. The Xcode development tools used by iOS app makers was modified by hackers to inject malicious code into apps on the App Store aiming to phish passwords and URLs through the infected apps.

Impact

At least 350 apps, including WeChat, which affected hundreds of millions of users alone.

Type of compromise

This was a counterfeit artifact delivered to developers.