SourMint: Malicious code, ad fraud, and data leak in iOS

Snyk researchers discovered malicious functionality in the Mintegral mobile advertising SDK (SourMint) that intercepts all URL-based requests via method swizzling, logs request details (including URLs, headers, IDFA, IMEI, backtrace and device data) to a remote server, and forges click-attribution notifications to steal ad revenue from competing networks; the SDK also contains anti-tampering/debug-detection to evade analysis and has been identified across many apps and SDK versions.