Legitimate apps screened by the Apple Apps Store are actually infected with malicious code after developers have used a fake version of Xcode, leaving Apple to try and shut down the first large-scale break of the software that runs iPhones and iPads.
The system known as XcodeGhost inserts extra code into apps being developed, this allows the scam code to sneak through the submission process to get onto the App Store, a process that has always been known for it’s strict processes.
According to Business Insider Chinese developers may have been tricked by the claims that downloading this ‘alternative’ version of Xcode that downloaded quicker than the Apple version.
So far apps that have been affected by the malicious code are only available to download on the Chinese App Store and Apple is working with developers to make sure they are working with the official version of Xcode.