The malware XcodeGhost can do several things. It sends information about the app it has infected and the machine it's running on to a server operated by its creators. After the malware phones home, it can receive commands from its masters -- commands such as display a pop-up box or open a URL. "They can be used to trick a user into giving up their credentials," said Palo Alto's Ryan Olson.

 Google last week released a preview of Android Studio 2.0 at the inaugural Android Dev Summit in Mountain View, California.The preview offers several updates, including Instant Run and a new GPU Profiler.It's available in the Canary release channel for the Linux, Mac and Windows platforms.
Instant Run lets developers see changes to code running on their devices or emulators, while the GPU Profiler lets users profile their OpenGL ES Android code.