ZergHelper

ZergHelper is iOS riskware that was unique due to its apparent evasion of Apple's App Store review process. No malicious functionality was identified in the app, but it presents security risks. [1]

ID: S0287
ⓘ
Type: MALWARE
Version: 1.0
Created: 25 October 2017
Last Modified: 02 September 2026

Techniques Used

Domain ID Name Use
Mobile T1476 Deliver Malicious Application via Other Means

ZergHelper has abused enterprise and personal certificates to sign and distribute applications.[1]

Mobile T1407 Download New Code at Runtime

ZergHelper attempts to extend its capabilities via dynamic updating of its code.[1]

References