This Pirated Movies App Sneaked Onto The Apple App Store Disguised As A Vision Test – News18

Curated By: Shaurya Sharma

Last Updated: February 14, 2024, 10:00 IST

Cupertino, California, USA

Apple is usually quite stringent with its App Store reviews.

Kimi app posed as a vision testing app but, upon opening, revealed a collection of TV shows and movies for users to download and watch.

Apps that violate Apple App Store or Google Play guidelines rarely make it to users for download. However, occasionally, they manage to slip past reviewers and get downloaded multiple times through the App Store or Play Store.

One such instance is the app ‘Kimi’ on the Apple App Store, which streamed pirated movies and surprisingly reached the 8th position in the trending list of free entertainment apps on Apple iOS App Store, as reported by The Verge.

The app posed as a vision testing app but, upon opening, revealed a collection of TV shows and movies for users to download and watch. Interestingly, it did not employ deceptive UI or hide pirated content; everything was boldly presented upon opening. This raises the question of how Apple App reviewers overlooked it.

Notably, the Kimi app had a description claiming to be a vision testing app, despite offering movies and TV shows for free with ads.

The app entered the Apple App Store in September of last year, and it remained functional until The Verge’s story. Apple has since removed the app from the App Store, making it unavailable for download.

In recent memory, it’s worth noting that this marks the second occasion where such an app has infiltrated the App Store. Just last week, LastPass, a well-known password manager, alerted users about a malicious duplicate named ‘LassPass.’ This imposter mimicked LastPass in terms of design, UI, and branding. Although the app was swiftly removed after the company raised concerns, it doesn’t alter the potential risk it posed. There’s the possibility that the deceptive app could have convinced users to provide login information, passwords for various websites, and IDs, putting users at risk of exploitation by the fraudulent developer.