Apple takes a long time to remove fake app posing as a popular password manager
In this article (4)
Imposter app LassPass posing as the popular password manager LastPass has been removed from the App Store one day after the creators of the original app issued a warning against it.
Apple prides itself on keeping the App Store safe by performing numerous safety checks before approving an app. It does seem to have a higher bar for security than its immediate competitor. That doesn’t mean it’s doing a perfect job of keeping the App Store safe, as the latest incident shows.
What makes the oversight feel particularly worrisome, though, is that LastPass is a service people use to store logins and passwords for various platforms. A fake copycat app designed to trick people into revealing their master password could give the bad actors behind it access to every or most apps a person uses.
The app in question, LassPass, had a name resembling the original app and copied LastPass’s branding and interface.
There were some telltale signs that it was a fake that many users quickly noticed, such as misspellings and a different publisher. It also had only one rating, whereas the legitimate app has more than 52 thousand. All of the reviews for it also noted that it was a deceptive app.
LastPass created a blog post on February 7 to warn its users against the app, which was removed from the App Store on February 8. According to the analytics platform Appfigures, the app has been on the platform since January 21. TechCrunch reports.
It’s not known how many people fell for the app, but it can be assumed that it failed to attract many downloads, as it never made it to any of Apple’s Top Charts.
If you have LassPass on your iPhone, not only should you delete it, but also change your LastPass password.
Questions & Answers
Q.How long was the fake app available on the App Store before Apple removed it?
How long was the fake app available on the App Store before Apple removed it?
The imposter app, LassPass, was available on the App Store for 18 days, having been on the platform since January 21 and removed on February 8. Apple removed it one day after the original app's creators issued a warning.
Q.What indicators did users notice that suggested the 'LassPass' app was not legitimate?
What indicators did users notice that suggested the 'LassPass' app was not legitimate?
Users noticed several red flags, including misspellings within the app and a different publisher listed compared to the official LastPass. The fake app also had only one rating, in contrast to the legitimate app's more than 52,000 ratings.
Q.What advice has been given to users who might have downloaded the 'LassPass' app?
What advice has been given to users who might have downloaded the 'LassPass' app?
Users who downloaded LassPass should immediately delete the app from their iPhone. Also, they are strongly advised to change their password for the legitimate LastPass service to protect their stored login information.