Most of our activity on our devices is done through applications. From checking the weather to watching a streaming movie, an App Store app is required. And in this context, there are also those who use really clever tactics to evade the rules established by Apple. A recent example of this is the “Collect Cards: Store box” app, which disguised itself as a simple tool for managing photos and videos, successfully infiltrating the App Store and operating as a pirate streaming platform.
The deception behind the geolocation app
At first glance, the application seemed like a harmless app. Its description in the App Store was brief and the screenshots showed a basic interface for managing photos and videos. However, upon downloading it, users discovered a surprise: the app transformed into a pirate streaming platform, offering content from popular services such as Netflix, Disney+, Amazon Prime Video, HBO Max, and even Apple TV+.
According to 9to5mac, the key to the deception was the use of device location. Depending on the location of the iPhone, the app would display either the basic interface or the pirate streaming interface. In regions like the United States, the app would hide all streaming-related functions, ensuring that App Store reviewers only saw the harmless version, while outside, it provided access to a vast collection of pirated content.
Despite going unnoticed for over a year, the app gained notoriety by reaching the second position among the most downloaded free apps in Brazil. This sudden rise drew attention to the app and it was finally detected by the Apple review team.
After detecting it, Apple acted quickly and removed the application from the store. However, the incident highlighted the ingenious strategies that some developers use to bypass Apple’s rules. A situation that is aggravated now that applications in Europe can come from any source, which makes it much more difficult to detect and remove illegal applications.
This is not the first time that location has been used to deceive Apple’s review team. In 2017, Uber was accused of creating a geofence around Apple’s headquarters in Cupertino. Within this geofence, the app would disable the codes used to track and identify users on the web. Codes and behaviors that were active outside of Apple Park.
Apple has invested significantly in measures to combat fraud on our iPhones. In 2021, we have learned that the App Store review team has over 500 human experts who review over 100,000 applications every week. With this, the company claims to have blocked fraud worth $7 billion on the App Store, highlighting the magnitude of the problem and the ongoing effort to keep our iPhones safe.
The case of Collect Cards is a reminder of the cunning that some developers employ to evade regulations. Although the success of these tactics is usually temporary, now that we are moving away from centralized distribution through app stores that can detect and prevent the proliferation of illegal or malicious applications for the user, the situation becomes relevant.
