Apple Rejected 2 Million App Store Submissions for Security and Fraud Prevention
Apple rejected over 2 million App Store submissions in 2023 due to security and fraud concerns, according to SecurityWeek. This isn’t just about bad code; it’s a massive defensive effort against a constant barrage of malicious apps attempting to infiltrate their ecosystem. These rejections represent a significant barrier to entry for threat actors looking to leverage the App Store’s reach for phishing, malware distribution, or credential harvesting.
Beyond app submissions, SecurityWeek further notes that Apple blocked more than 1.1 billion accounts and prevented an estimated $2.2 billion in potentially fraudulent transactions. This highlights the scale of the financial crime and account takeover attempts targeting users within the Apple ecosystem. It’s a clear indicator that the App Store remains a high-value target for various forms of digital fraud.
For defenders, this underscores the sheer volume of malicious activity platforms like Apple are contending with. While Apple’s gatekeeping is robust, it doesn’t eliminate the need for user vigilance. The attacker’s calculus here is simple: if enough attempts are made, some will inevitably slip through, or users will be tricked into granting permissions to seemingly benign apps.
What This Means For You
- If your organization relies on iOS devices, understand that even with Apple's stringent controls, user education on app permissions and suspicious app behavior is critical. This isn't just about preventing malware; it's about protecting against sophisticated social engineering and fraud that can bypass even the best technical defenses. Ensure your mobile device management (MDM) policies restrict risky app installations and maintain strict access controls for corporate data.
Related ATT&CK Techniques
🛡️ Detection Rules
3 rules · 6 SIEM formats3 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.
Apple App Store Malicious Submission Attempt
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| Apple-AppStore-2025 | Misconfiguration | Apple App Store submission rejections due to security and fraud prevention policies |
| Apple-AppStore-2025 | Information Disclosure | Potential for fraudulent transactions on Apple App Store |