topic Re: How to stop malware called XcodeGhost? in General Topics

How to stop malware called XcodeGhost?

Transporter — Mon, 13 Jun 2016 10:00:12 GMT

Hi Guys,

One of our firewalls is setup to scan this traffic will full threat prevention but it seems to not be picking up the XCodeGhost.

Any suggestions?

Thank you,

Mykhaylo

Re: How to stop malware called XcodeGhost?

reaper — Tue, 14 Jun 2016 07:13:11 GMT

Hi!

Did you make sure the latest content package is installed ?

threatvault indicates you'd need at least content version 530 for XCodeGhost. If you do have this one or a newer content package, you can submit file samples to wildfire or open a support case to have your findings investigated (there might be a newer version we haven't encountered yet)

Re: How to stop malware called XcodeGhost?

Transporter — Sun, 19 Jun 2016 22:11:55 GMT

Hi reaper,

Yes, we got the latest content package installed. This is now with Palo. Will let you know the outcome.

Thanks