logo

Free tool to remove YiSpecter

ID: 0948ebcd-4d1b-5532-a49b-df56f7d5e174

STIX ID: report--0948ebcd-4d1b-5532-a49b-df56f7d5e174

Feed Name: Zimperium Blog

Threat Score
70/100

Date Published: 2015-10-08

Date Updated: 2026-05-01

...
...

YiSpecter is a malicious iOS campaign that leverages an enterprise-signed certificate (Beijing Yingmob Interaction Technology Co., ltd.) and social engineering to install apps on non‑jailbroken devices. The report lists C2 subdomains and IPs, multiple SHA256 sample hashes for apps (ADPage, DaPian, HYQvod, NoIcon, NoIconUpdate), advises upgrading to iOS 9.0.2, removing specific configuration profiles and apps, and references a removal tool (zYiRemoval) provided by Zimperium zLabs.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.