ZergHelper is iOS riskware that was unique due to its apparent evasion of Apple's App Store review process. No malicious functionality was identified in the app, but it presents security risks. [1]
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Mobile | T1476 | Deliver Malicious Application via Other Means |
ZergHelper has abused enterprise and personal certificates to sign and distribute applications.[1] |
|
| Mobile | T1407 | Download New Code at Runtime |
ZergHelper attempts to extend its capabilities via dynamic updating of its code.[1] |
|