“Maybe we need to bypass their process, since it’s been weeks and they’re still putting users at risk?” chimed in another user on the ticket. As far as we can tell, the malicious application remains available for download.Īs recently as six weeks ago, Phobos indicated on the ticket that they would attempt to contact Apple again. Since that time, more than three months ago, it seems there has been no further response from Apple. Apple responded shortly thereafter, saying they would give the app’s developer a chance to defend the app. Phobos submitted a complaint with Apple regarding the application on Dec.

“One could also attempt to reverse engineer it.” “Yes, but that would involve using the app and analyzing what it does,” Sandvik responded.

Threatpost reached out to the Tor Project’s Runa Sandvik and asked of there was any way to confirm that the app did indeed contain adware and spyware.

Worse yet, not only is the application said to be illegitimate, but also allegedly malicious.Īccording to a support ticket opened by a Tor Project volunteer operating under the handle Phobos, this iOS Tor Browser in the App Store is “full of adware and spyware.” An iOS Tor Browser hosted for download on Apple’s notoriously restrictive App Store is reportedly a fake.

Tor project for ios