Skip to content

S0287 ZergHelper

ZergHelper is iOS riskware that was unique due to its apparent evasion of Apple’s App Store review process. No malicious functionality was identified in the app, but it presents security risks. 1

Item Value
ID S0287
Version 1.0
Created 25 October 2017
Last Modified 24 October 2022
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
mobile T1407 Download New Code at Runtime ZergHelper attempts to extend its capabilities via dynamic updating of its code.1