View all newsletters
Receive our newsletter - data, insights and analysis delivered to you
  1. Technology
  2. Cybersecurity
November 7, 2014

WireLurker malware now attacking Windows

Malware downloaded more than 65,000 times since March, 97.7% on Windows

By Jimmy Nicholls

Hackers are attacking Windows through the same malware family targeting iOS devices in China, according to the security company Palo Alto Networks.

An older sample of WireLurker was discovered connecting to the command and control (C&C) server that issues instructions to the virus by a security researcher Jaime Blasco from AlienVault Labs, prompting further investigation from Palo Alto, which first reported on the virus.

Claud Xiao and Royce Lu, researchers at Palo Alto, said: "This variant is being distributed by a different Chinese source that is hosting 180 Windows executables and 67 Mac OS X applications, each of which contains a version of the WireLurker trojan.

"The Windows variant opens a new vector for iOS users to be infected with WireLurker, but appears to have been less successful than its Mac OS X descendent."

The malware has been downloaded more than 65,000 times since March 13, with the Windows version accounting for 97.7% of downloads, but all versions target iOS devices which have been configured to download apps from outside Apple’s e-store, or "jailbroken".

Victims using Windows are directed to the iTunes music player on Apple China’s website once the virus has been installed, then instructed to connect their iOS device to their computing once the music player is running.

"The pirated iOS apps that the malware attempts to install are cracked versions of legitimate iOS apps," Xiao and Lu added.

Content from our partners
Rethinking cloud: challenging assumptions, learning lessons
DTX Manchester welcomes leading tech talent from across the region and beyond
The hidden complexities of deploying AI in your business

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how Progressive Media Investments may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.