Free tool to remove YiSpecter
ID: 0948ebcd-4d1b-5532-a49b-df56f7d5e174
STIX ID: report--0948ebcd-4d1b-5532-a49b-df56f7d5e174
Feed Name: Zimperium Blog
Threat Score
YiSpecter is a malicious iOS campaign that leverages an enterprise-signed certificate (Beijing Yingmob Interaction Technology Co., ltd.) and social engineering to install apps on non‑jailbroken devices. The report lists C2 subdomains and IPs, multiple SHA256 sample hashes for apps (ADPage, DaPian, HYQvod, NoIcon, NoIconUpdate), advises upgrading to iOS 9.0.2, removing specific configuration profiles and apps, and references a removal tool (zYiRemoval) provided by Zimperium zLabs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
