Ještě na téma Masque Attack:
'Masque attack': Don't panic but do pay attention | iMore
http://www.imore.com/masque-attack
In order to make a Masque attack work, an attacker has to:
1. Have an iOS Developer Enterprise Program account or the universal device identifier (UDID) for the device they want to target.
2. Make a malicious app that looks like a popular, existing app. (A fake Gmail app that simply loads the Gmail website in FireEye's example.)
3. Get you to download their fake app from outside the App Store. (For example, by sending you an email with a link in it.)
4. Get you to agree to the iOS popup that warns you the app you're trying to install is from an untrusted source.