Skip to main content

Fake Alexa setup app for iOS taken down but could still be dangerous

If you downloaded One World Software’s scam “Setup for Amazon Alexa” iOS app from the iPhone App Store store, do yourself a favor and delete the app. If you already installed it, uninstall the app and then delete it. Fortunately, at least for all others, the fake app is no longer listed on the App Store.

The malicious app got as high as sixth place in downloads in the Apple App Store Utilities section and 60th place overall in Top Free apps, according to 9to5Mac. Before the fraudulent setup app was finally taken down Thursday evening, December 27, it had received more than 9,400 ratings, Venture Beat reported.

Recommended Videos

After reported sales of millions of Amazon Alexa devices during the Christmas season, it’s not surprising the app climbed high on the download list. Many owners who wanted to configure new Alexa devices likely used its name as a search term.

The Echo Dot printed setup guide instructs owners to download the Alexa App on the iOS or Android app store. No other app is required to set up an Alexa device. However, when a search for “Alexa” returns a long list of possibles, choosing an app named for what you want to do, such as in this case to set up Amazon Alexa, seems logical.

Users who downloaded the app have not reported any specific harm other than wasted time. Many of its rapidly acquired ratings complained the app didn’t work.

The scam app users are required to enter their Alexa device serial number, IP address, and a name for the device. The app’s privacy policy goes on and on about the required permissions you must grant the publisher to use the app. Users must allow the publisher to collect, use, and share information about you and your actions online. The personal information on the list included, “IP address, browser information, referring/exit pages and URLs, clickstream data … domain names, landing pages, page views, cookie data … mobile device type, mobile device IDs … and location data,” Venture Beat reported.

Two additional apps published by One World Software, “Marketplace – Buy/Sell” and “Any Font for Instagram” have also been removed from the iTunes Store.

As anyone who has submitted an app for the iOS App Store review process can attest, Apple’s app screening is rigorous. Regardless, “Setup for Amazon Alexa” did make its way through the filters, which is disconcerting. But now the app has been removed.

Bruce Brown
Bruce Brown Contributing Editor   As a Contributing Editor to the Auto teams at Digital Trends and TheManual.com, Bruce…
iOS 15 bug recorded a ‘small portion’ of Siri interactions
three iPhones each showcasing a new feature of iOS 15

Apple has brought a lot of changes to its devices in the iOS 15 update with the new Focus taskbar, Live Text, the redesigned Safari browser, and more. However, the company has noted that the transition to the newest software hasn't been entirely smooth. Some users who opted out of Siri and Dictation's ability to record their voices for service improvements were recorded anyway.

Despite giving iOS users the ability to opt out of the service, recordings of unconsenting users were made and sent to Apple as the result of a bug in iOS 15.  The bug has since been fixed as of the iOS 15.2 update, and Apple addressed the issue by saying that it deleted "audio received from all affected devices" in a statement to ZDNet. In the same statement, Apple said that the bug turned on the Improve Siri and Dictation setting on unaware iOS users, but the company has turned the setting off again for those affected.

Read more
Apple’s iOS 15.3 update fixes critical Safari security bug
iPhone showing Home Screen with widgets resting on soft white cloth background.

Apple has just released iOS 15.3, and while this latest update doesn’t add any significant new features, it addresses at least one critical security flaw. Earlier this month, software engineer Martin Bajanik of FingerprintJS found a serious vulnerability in Safari 15, the browser included in iOS 15 and iPadOS 15, that could leak browsing history information and even credentials from online services that a person is using, such as Google, YouTube, Amazon, and sites using WordPress.

As Bajanik explains, many websites use an API called IndexedDB to request that browsers like Safari and Chrome store information in a local database on a person’s device. Under normal circumstances, a given website should only be able to request information about the databases that it created — any others should be invisible to it.

Read more
Apple might drop support for the iPhone SE and iPhone 6S with arrival of iOS 16
iphone 6s launch

Apple may finally be dropping some of its oldest supported iPhones with the next iOS release. This report comes from the French publication iPhoneSoft, which accurately predicted the iOS 13 and iOS 14 road maps.

Apple has been praised for supporting its iPhones for an exceedingly long period of time with full updates, and that has led to impressive scenarios like the iPhone 6S and iPhone 7 being updated to iOS 15 last year. Granted, they couldn't take advantage of several hardware-enabled features, but they weren't rapidly outdated either.

Read more