Mobile IoT Authors: Yeshim Deniz, Elizabeth White, Pat Romanski, Liz McMillan, Kevin Benedict

News Feed Item

Appthority First Mobile App Security Company to Protect Enterprises from MASQUE and WireLurker iOS Malware

Leading Mobile App Risk Management Solution Detects and Analyzes High-Threat Malware

SAN FRANCISCO, Dec. 2, 2014 /PRNewswire/ -- Today Appthority, the leader in enterprise Mobile App Risk Management, announced the immediate release of a solution for analyzing and exposing both the MASQUE and WireLurker iOS mobile malware for its customers. As the first mobile app security company to detect this new iOS malware, which surfaced in early and mid-November, Appthority moved quickly to implement scanning, analysis and detection for both MASQUE and WireLurker. By quickly deploying an update to its cloud-based solution, Appthority enterprise customers have been protected since November 20, 2014.


The MASQUE and WireLurker iOS malware are a threat to enterprise customers using iPhone and iPad devices because they compromise sensitive company data. An attack takes place when users update or add apps to their devices due to a critical vulnerability in iOS 7 and iOS 8 that allows hackers to install imposter apps which stealthily replace an existing legitimate app with an identical looking malicious version. In addition to the ability to leak private and sensitive data, the malicious app can also potentially capture an employee's identification or login credentials without their knowledge.

Appthority has determined that mobile apps downloaded from third party app stores or private iOS apps—developed for internal enterprise use—manually installed on mobile devices, are at risk from MASQUE and WireLurker malware. The MASQUE malware in particular puts sensitive enterprise data at-risk by making use of iOS vulnerabilities and techniques to replace a legitimate app, such as a mobile corporate email program or calendar, with a malicious copy. The malicious copy may look and behave just like the original app, quietly accessing the original private data and emails while reading and exfiltrating this sensitive data to a remote network address.

"Appthority takes mobile malware seriously and is proud to be the first mobile app security company to deploy a commercial solution for detecting both MASQUE and WireLurker iOS malware," said Paul Stich, CEO of Appthority. "Our customers count on us to protect them from the escalating risk to private and sensitive company information from mobile apps, and doing so is our top priority."

Only Appthority Enterprise Mobile App Risk Management provides a comprehensive and dynamic solution for effectively managing mobile app risk and protecting private enterprise data. As the first mobile security company to commercially deploy a solution for MASQUE and WireLurker iOS malware detection to its customers, Appthority has issued an update to its cloud-based risk analysis engine to assess and alert its customers if this malware is identified on apps they have submitted for analysis. Through deep binary code structure analysis and identification of risky mobile app behaviors, Appthority Mobile App Risk Management intelligently assesses and exposes overall app risk to the enterprise. With a continuous analysis of risky apps, enterprise mobility and security teams have the ability to dynamically configure mobile app risk policies for different groups of employees and to monitor for ongoing policy compliance.

"In the past, iOS malware was limited to academic scenarios or proof of concept demonstrations," said Domingo Guerra, president and co-founder of Appthority. "As mobile malware evolves and morphs into a legitimate business threat, it is critical that security companies move quickly to protect their customers. Appthority is proud to offer the first commercially available product that detects these new types of iOS malware, giving us the most complete App Risk Management service capable of automatically analyzing apps to address not only new malware threats, but also corporate data exfiltration and privacy concerns."          

Appthority has determined that apps downloaded from Apple's App Store are not at risk for the MASQUE and WireLurker malware.

About Appthority
Appthority provides the industry's first all-in-one App Risk Management service that employs static, dynamic and behavioral analysis to immediately discover the hidden actions of apps and empower organizations to apply custom policies to prevent unwanted app behaviors. Only Appthority combines the largest global database of analyzed public and private apps with advanced policy management tools to automate control over risky app actions and protect corporate data. Named the Most Innovative Company of RSA Conference 2012, Appthority has analyzed nearly two million apps for its Global 2000 and government customers. By delivering trust to the app ecosystem, Appthority allows enterprises to securely benefit from the proliferation of useful apps. Headquartered in San Francisco, Appthority is venture-backed by U.S. Venture Partners and Venrock. More information on Appthority can be found at https://www.appthority.com.

Appthority name and logo are either registered trademarks or trademarks of Appthority, Inc in the United States and/or other countries. All other products and/or services referenced are trademarks of their respective companies.

Logo - http://photos.prnewswire.com/prnh/20130826/SF69650LOGO

To view the original version on PR Newswire, visit:http://www.prnewswire.com/news-releases/appthority-first-mobile-app-security-company-to-protect-enterprises-from-masque-and-wirelurker-ios-malware-300003030.html

SOURCE Appthority

More Stories By PR Newswire

Copyright © 2007 PR Newswire. All rights reserved. Republication or redistribution of PRNewswire content is expressly prohibited without the prior written consent of PRNewswire. PRNewswire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

IoT & Smart Cities Stories
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...
DXWorldEXPO | CloudEXPO are the world's most influential, independent events where Cloud Computing was coined and where technology buyers and vendors meet to experience and discuss the big picture of Digital Transformation and all of the strategies, tactics, and tools they need to realize their goals. Sponsors of DXWorldEXPO | CloudEXPO benefit from unmatched branding, profile building and lead generation opportunities.
Disruption, Innovation, Artificial Intelligence and Machine Learning, Leadership and Management hear these words all day every day... lofty goals but how do we make it real? Add to that, that simply put, people don't like change. But what if we could implement and utilize these enterprise tools in a fast and "Non-Disruptive" way, enabling us to glean insights about our business, identify and reduce exposure, risk and liability, and secure business continuity?
DXWorldEXPO LLC announced today that Telecom Reseller has been named "Media Sponsor" of CloudEXPO | DXWorldEXPO 2018 New York, which will take place on November 11-13, 2018 in New York City, NY. Telecom Reseller reports on Unified Communications, UCaaS, BPaaS for enterprise and SMBs. They report extensively on both customer premises based solutions such as IP-PBX as well as cloud based and hosted platforms.
The deluge of IoT sensor data collected from connected devices and the powerful AI required to make that data actionable are giving rise to a hybrid ecosystem in which cloud, on-prem and edge processes become interweaved. Attendees will learn how emerging composable infrastructure solutions deliver the adaptive architecture needed to manage this new data reality. Machine learning algorithms can better anticipate data storms and automate resources to support surges, including fully scalable GPU-c...
Digital Transformation: Preparing Cloud & IoT Security for the Age of Artificial Intelligence. As automation and artificial intelligence (AI) power solution development and delivery, many businesses need to build backend cloud capabilities. Well-poised organizations, marketing smart devices with AI and BlockChain capabilities prepare to refine compliance and regulatory capabilities in 2018. Volumes of health, financial, technical and privacy data, along with tightening compliance requirements by...
@DevOpsSummit at Cloud Expo, taking place November 12-13 in New York City, NY, is co-located with 22nd international CloudEXPO | first international DXWorldEXPO and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The widespread success of cloud computing is driving the DevOps revolution in enterprise IT. Now as never before, development teams must communicate and collaborate in a dynamic, 24/7/365 environment. There is no time t...
DXWorldEXPO LLC announced today that "IoT Now" was named media sponsor of CloudEXPO | DXWorldEXPO 2018 New York, which will take place on November 11-13, 2018 in New York City, NY. IoT Now explores the evolving opportunities and challenges facing CSPs, and it passes on some lessons learned from those who have taken the first steps in next-gen IoT services.
SYS-CON Events announced today that Silicon India has been named “Media Sponsor” of SYS-CON's 21st International Cloud Expo, which will take place on Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Published in Silicon Valley, Silicon India magazine is the premiere platform for CIOs to discuss their innovative enterprise solutions and allows IT vendors to learn about new solutions that can help grow their business.