Several cyber security firms found a malicious program dubbed XcodeGhost that was embedded in hundreds of legitimate apps.