1. Home
  2. Software
  3. WireLurker

WireLurker

WireLurker is a family of macOS malware that targets iOS devices connected over USB. [1]

ID: S0312
ⓘ
Type: MALWARE
ⓘ
Platforms: iOS
Version: 1.1
Created: 25 October 2017
Last Modified: 11 December 2018
Mobile Layer
download view

Techniques Used

Domain ID Name Use
Mobile T1458 Exploit via Charging Station or PC

WireLurker monitors for iOS devices connected via USB to an infected OSX computer and installs downloaded third-party applications or automatically generated malicious applications onto the device.[1]
Mobile T1406 Obfuscated Files or Information

WireLurker obfuscates its payload through complex code structure, multiple component versions, file hiding, code obfuscation and customized encryption to thwart anti-reversing.[1]

References

  1. Claud Xiao. (2014, November 5). WireLurker: A New Era in OS X and iOS Malware. Retrieved January 24, 2017.