SourMint: Malicious code, ad fraud, and data leak in iOS (opens in new tab)

(snyk.io)

10 pointsalyssam_infosec5y ago3 comments

3 comments

3 comments · 2 top-level

francesca5y ago· 1 in thread

This is why developers need to be careful when choosing which SDKs they use for developing apps.

Totally - Sounds like they started as a legitimate Ad SDK too!

Amazing that this has been going for a year now - Let's see how Apple deal with the existing apps on the AppStore.

j / k navigate · click thread line to collapse