Researchers Say iPhone Users Hit With App Store's First Ever Spam-Sending App
A screenshot from Find and Call's website. — Just as antivirus researchers congratulated Apple for keeping the iPhone free of nasty apps five full years after its release, spammers seem to have finally tarnished that spotless record.
Context & Ripple Effects
The warning track here is long: The Register flagged spyware risk on 'squeaky-clean' iPhones back in December 2009, Silicon Alley Insider called out Apple's App Store spam problem in May 2010, and last November The Firewall documented an iPhone security bug that let innocent-looking apps go bad. What changed with Find and Call is that the hypothetical became an incident — researchers say it harvested users' contact lists and sent spam SMS and email invitations, making it the first malicious app to slip through Apple's review in the store's five-year history.
The breadth of pickup — MacRumors, Wired, CNET, The Verge and others all carried the story within a day, with MacRumors reporting Apple pulled the Russian SMS-spam app — shows how much symbolic weight rode on that clean record. For a company whose marketing rests on the curated store being safer than open platforms, one confirmed bad app is a reputational event even if the technical blast radius is small.
First-order effects
- Apple has removed Find and Call from the App Store, but users who already installed it had their address books scraped and their contacts sent spam messages inviting them to download the app.
- The app's developer faces removal and potential account termination, while Apple's review team owns the question of how a contact-harvesting spam tool passed vetting.
Second-order effects
- Every platform rival's marketing pitch gets sharper by contrast: Google's Android malware problem was the baseline Apple measured itself against, and that five-year talking point is now spent.
- App Store review pressure shifts from content policy (pornography, cloned apps) toward behavioral screening — what an app does with user data after approval — which means more manual scrutiny and slower or stricter approvals for contact-list access.
Third-order effects
- If spam and data-harvesting apps keep slipping through, the curated-store-as-security-moat argument erodes, pushing Apple toward post-approval monitoring and takedown processes rather than relying on pre-publication review alone.
- Security researchers gain standing as an external audit layer for walled gardens: the finding came from antivirus researchers, not Apple, establishing a pattern where third-party labs effectively police the store's claims.
The trend: Mobile app stores are moving from pre-launch content gatekeeping toward continuous behavioral security, as the first confirmed malicious app punctures the curated-store safety record.