Receiving a xcodeghost Malware alert
You may have recently received a letter and/or email from Virgin Media explaining that we have been notified that an iOS device (Apple) on your network contains malware named XCodeGhost.
If you have received such a communication from us, please follow the advice given on this page to resolve the issue.
XCodeGhost is a form of Trojan that specifically targets the iOS operating system, which runs on Apple iPad and iPhone devices.
The malware is distributed through applications downloaded from the Apple App Store. It is usually distributed in an application without the developer’s knowledge due to devices on their end also being compromised with the malware.
The XCodeGhost malware is designed to steal personal and financial information from infected devices. Steps to remove the malware should be taken as soon as possible to ensure your personal and financial data is not compromised.
What has happened?
We work with a number of not-for-profit organisations across the banking industry and security sectors that collate information on devices across the Internet that are infected with malware. They have notified us that an iOS device on your home Internet connection (or one connected to your home network) is infected with malware.
Your financial transactions and personal data could be at risk. It is therefore important that you follow the advice in this article.
Want a hand fixing your home devices?
If you require expert assistance to deal with this issue why not use our payable Gadget Rescue** service to help secure your home devices? Gadget Rescue operates 24/7 and solves 99% of digital issues from smart phones to digital cameras. For more information on how our Gadget Rescue service can help please visit virginmedia.com/gadgetrescue
Want to fix the issue yourself?
We’re here to help and if you have a basic knowledge of computers and connected devices there are a number of steps you can take to secure your home network. Please apply these steps in order:
1. Remove any infected applications installed on your device 1. Remove any infected applications installed on your device
A number of applications available on the Apple App Store have been infected with the XCodeGhost malware.
Uninstalling any infected applications from your iOS device should make your device safe from the malware.
A list of popular applications known to be infected with the malware can be found by visiting:
- blog.lookout.com/blog/2015/09/21/xcodeghost-apps/ ***
- researchcenter.paloaltonetworks.com/2015/09/malware-xcodeghost-infects-39-ios-apps-including-wechat-affecting-hundreds-of-millions-of-users/ ***
- f-secure.com/v-descs/backdoor_iphoneos_xcodeghost.shtml ***
- blog.malwarebytes.org/mac/2015/09/xcodeghost-malware-infiltrates-app-store/ ***
2. Check to see if your device has an infection 2. Check to see if your device has an infection
3. Restore to Factory settings 3. Restore to Factory settings
If the above two steps have not helped clear the infection we advise you perform a factory reset using the following link:
It is not known exactly how many applications and exactly what apps have been compromised by the XCodeGhost malware. Manually uninstalling all applications that were not shipped with your iOS device may be required to fully protect your device from the malware.
How do I know I’m now safe?
If you have followed the above advice & have rescanned your device and found it to be clean, you should have resolved the issue.
If you would like further advice or to verify that this is a genuine Virgin Media communication then our community will be happy to help. Just visit virginmedia.com/community, select 'Help forum' and join in the conversation on the Security Matters board.
Where can I find further information and advice?
If you’d like further advice then our forum community will be happy to help. Just visit virginmedia.com/community and join the conversation on our Security Matters board.
You can find general security advice and articles on other vulnerabilities by checking Security Hub at virginmedia.com/securityhub
Virgin Media supports Internet Matters: a not-for-profit organisation working with online safety experts to bring you all the information you need to help keep your children safe online.
For more information about Internet Matters, please click here
*Note: This article is intended to provide advice. Virgin Media is not responsible for any issues encountered in the course of resolving the issue and is not able to provide any technical support for such problems.
** Minimum system requirements and Acceptable Use Policy apply. Gadget Rescue is available on a monthly subscription basis (6 month minimum term applies) or as a "One-Off Fix" service. Gadget Rescue terms and conditions apply.