Unfortunately, I installed some of the apps mentioned on this list, and confirmed that the versions I have are still compromised by XcodeGhost: http://researchcenter.paloaltonetworks.com/2015/09/malware-xcodeghost-infects-39-ios-apps-including-wechat-affecting-hundreds-of-millions-of-users/
Of course, I have immediately removed them. But what I am concerned about is whether they have managed to hide the virus anywhere else in the system? The article doesn't explicitly address this, but did the virus manage to break out of iOS sandboxing?
Also, relatedly, does anyone know if the infected apps collected anything else besides those already reported by Palto Alto Networks?, e.g. texts, contact info, etc?
Current time Current infected app’s name The app’s bundle identifier Current device’s name and type Current system’s language and country Current device’s UUID Network type
It's already been reported here that the malware phishes for iCloud passwords: http://researchcenter.paloaltonetworks.com/2015/09/update-xcodeghost-attacker-can-phish-passwords-and-open-urls-though-infected-apps/