After facing public backlash, Apple recently removed some unethical apps from the App Store. Here’s what you need to know to avoid getting scammed.
On Sunday, July 2, an Indian journalist tweeted that someone had contacted her about an experience someone had with an App Store app in India. Apparently, someone who had download an app called “White Kash-Personal Loan App” had granted the app access to her contacts—a seemingly strange request for such an app to make. Allegedly, the app’s developer then began threatening to send fake “nude pics” of the user to her contact list.
Wtf is this, a personal loan app called Kash is threatening to send morphed nude photos of their customer to her entire contact list?! pic.twitter.com/5LcsukVgef
— Sandhya Ramesh (@sandygrains) July 3, 2023
According to the report, existing App Store reviews allegedly indicated that this woman wasn’t the only person whom the app’s developer had threatened.
A TechCrunch writer contacted Apple for comment the following day. Two days later—three days after the Indian journalist’s tweet—Apple had removed at least six apps from the App Store for “falsely representing an association with a financial institution” on July 5. Other removed apps’ names included Golden Kash, OK Rupee, and Pocket Kash.
The following Sunday, July 9, an iOS developer tweeted about an app called “Threads for Insta,” with the comment, “How do apps like this get past the review process?” I noted that the name and logo were deceptively similar to Threads, an Instagram app—a new social media platform.
Confirmed, this is still in the App Store.
It’s obviously meant to trick people who are looking for the new “Threads, an Instagram app” social networking app.
cc: @privacyis1st who does a ton of research into scam/shady apps in the @Apple @AppStore.
@AppleSupport https://t.co/MQJaHKJn2e — Josh Long (the JoshMeister) (@theJoshMeister) July 10, 2023
The App Store listing showed that “Threads for Insta” offered in-app purchases, as high as $79.99 per year. At least one individual left a review claiming to have been deceived into thinking the app was the official Threads social networking app.
It took even longer for Apple to remove this app from the App Store. After much media attention—and concerns over the fact that it was available in the EU, where Threads is currently unavailable—Apple finally removed the app four days after the initial tweet.
While it’s good that Apple eventually removed these apps from the App Store, the fact that they somehow passed a manual human review is concerning. And then, after being called out publicly, Apple still took several days before taking action, in both cases.
These are far from the first examples of potentially harmful apps have appeared in the iOS App Store. Sketchy apps abound, particularly ones that claim to offer security or privacy benefits, and they often have outrageously high in-app purchase subscriptions.
As just one example, “Guard Browser” by a company nobody has ever heard of, “Venera OOO,” somehow justifies a $3.49/week ($181.48/year) subscription for an app that doesn’t appear to offer more functionality than any basic browser—and as of late 2021, the same app was charging $11.49/week ($597.48/year). In spite of sketchy claims, poor reviews, and ridiculous subscription pricing—for a Web browser, which can observe tons of users’ private data—Apple somehow approved this app and has never seemed to have a problem with it.
There have even been literally malware-infected apps in the iOS App Store in the past, too. Back in 2015, 128 million users downloaded more than 2,500 XcodeGhost-infected apps (about two-thirds of the victims were in China)—but Apple chose not to directly communicate these facts to its customers. In 2012, Windows malware even managed to sneak into the iOS App Store—just a month after a clearly fake Microsoft Word app was being sold in the store.
The Mac App Store isn’t much different. In 2018, we saw a Mac-slowing, overheating, cryptocurrency mining “feature” get added to a calendar app, followed by the discovery of 14 apps that exfiltrated users’ browsing history.
So while we’d like to say that the App Store is a safe haven, that’s not necessarily true 100% of the time. You still have to be careful with the App Store, too.
On the other hand, the App Store is probably still safer than downloading apps from update aggregator sites, or other third-parties besides the original developer’s own site.
Here are a few tips that can help you identify App Store apps that you might want to avoid.
With those tips in mind, it will be easier to avoid sketchy apps in the App Store.
You can also subscribe to our e-mail newsletter and keep an eye here on The Mac Security Blog for the latest Apple security and privacy news. And don’t forget to follow Intego on your favorite social media channels: 
