Apple pulls fake Ledger app and Freecash in rough day for App Store review

Apple's App Store review process failed to prevent a fake Ledger cryptocurrency app from stealing millions in digital assets from at least 50 users, while simultaneously missing a deceptive data-harvesting app (Freecash) that was collecting sensitive personal information under false pretenses. These incidents expose critical gaps in enterprise app distribution security and third-party software vetting, signaling that IT leaders cannot rely solely on major platform gatekeepers to protect against sophisticated fraud and data exfiltration threats. The pattern of malicious developers circumventing bans through alternate accounts demonstrates that platform review processes require substantial reinforcement and that organizations must implement additional security controls for mobile app governance.

9to5Mac2 min read
Read full article
Apple pulls fake Ledger app and Freecash in rough day for App Store review
Just as CoinDesk reported that a fake Ledger app had drained millions from App Store users, TechCrunch revealed that another app had been harvesting sensitive user data. Apple pulled both today. Here are the details. more…