A few scammy iOS applications have been taking advantage of Apple’s Touch ID platform by trying to trick users into making payments with false promises of using the fingerprint scans for fitness data, according to ESET’s WeLiveSecurity blog.

The two apps — called “Fitness Balance” and “Calories Tracker” — were spotted by various Reddit users over the last week, and both employ similar tactics. As part of their so-called “fitness tracking,” the apps ask users to place their fingerprint on the Touch ID scanner for 10 seconds, to “create personalized diet and other stuff.” While a user’s finger is placed on the pad, the app pops up an in-app purchase payment request for sums of money like $99.99. Since the user’s finger is already on the…

Continue reading…