手機病毒|新型木馬假扮遊戲偷銀行個資、再多193個Apps揭毒快刪
手機病毒|在各單位的通力合作之後,Android 的保安環境雖然比起從前已經有莫大改進,但黑客總找到新方法入侵手機,而最近一個偽裝成小遊戲的木馬程序「SpinOK」就成為 Android 手機用家們的最大煩惱。
SpinOK 木馬偽裝小遊戲、背後偷資料竊錢
「SpinOK」本身是作為一個具有實際功能的營銷類型 SDK 模組被放到網上,表面上它可以讓開發者在 Apps 中加入迷你遊戲、任務系統和抽獎來維持用戶對應用程序的興趣,但背後卻是另一回事。
SpinOK 木馬利用遊戲掩飾偷資料行為(圖 Dr.Web)
在確認於一部用家使用中的手機安裝後,SpinOK 就會發送一個包含大量受感染手機訊息的請求,再從至遠端的伺服器下載一個 URL 列表、在背景執行帶有惡意程序,其中包括提取手機中的特定文件、從設備上傳文件,或複製和替換剪貼簿內容,在此過程中,不單用戶的機密資料可能外洩,銀行帳戶密碼以及加密貨幣錢包登入資料都有可能被竊取,做成實際的財產損失。
再發現多 193 個 Apps 中招、部份仍未下架
在加入 SpinOK 的 App 初始運行時,會先收集一般實體手機都有的數據,例如陀螺儀、磁力計等等,以確定它是在一部真實的手機上運行,這種驗證機制,可避免 SpinOK 在開發階段就被 App 開發者發現其病毒特性,甚至可以成功令受感染的 Apps 成功在 Google Play 上架。
出於此「防護機制」,被植入 SpinOK 的 Apps 往往不能由開發者以至 Google Play 的審查系統察覺,直到被下載至用戶手機作惡才被發現,但可能已經為時已晚。
而繼 Dr.Web 上星期的報告之後,另一調查機構 CloudSEK 亦發表報告,指出他們在 Google Play 上發現多 193 個帶有 SpinOK 程序的 Apps,累計下載人數達到 3000 萬以上,有不少更仍然被保留在 Google Play 之上,各位最好比照一下此名單,如見到相同的 Apps 就要立即刪除。
Chip Winner 2048
iSecurity - Virus Cleaner
Quick Loan Pro
Calculator Lock – Photos Vault
Pixel Battle
Ztime:Earn cash rewards easily
Pop Stone 2 - Match 3 Game
Gem Puzzle
Real Money:Play Games Earn
Vast VPN - Secure VPN Proxy
Fast Booster Box
Channel3
Make Money - Game Time
Woohoo - Real Cash Games
Earn Money: Squid Game
Cash Game: Money Puppy
LuckyYou
Hello VPN-Fast & Secure
Dong Bao
HotBuku-Alat Pembaca Novel Profesional dan Populer
Yeloli Princess Makeup
Mnogo Monet
Yeloli Princess Makeup
UangNyata:hasilkan & permainan
Fast Loan Plus
Crazy Christmas Tree
Pop Diamonds
Cash All - Earn real money
Merge snack-Overfood
Vegas Coin Pusher
Crazy Cut Money
Lucky Cashman-Real Money&Paid
Lucky Slots: Real Money& Spin
TappyCoins
Pet Connect - cute pets match
Lucky Coin Pusher -3D
Money Tree Garden
Chips Winner
Mega Win Slots
SuperFastVPN-UnlimitedVPN
Magical Pet:Pop Match
Neutral Solitaire
BTC Linked
Lucky Dog Videos
Hexa Link - 2248 Connect Puzzle
Ganho Casual
Bitcoin 2 Moon
Pop Pop Balls
Fruits Legend: Farm Frenzy
Fruit Bubble Smash
BTC Fall
Sweet Fruit Smash
Funny Hoop
Go Break
Step Going
Funny Block
Squid Gem
Lucky Cube Blast
Cube Master 3D
Merge Crazy Bal
Grand Win Solitaire
ChipWin To 21:Merge game
Bubble Shooter Hero
Bingo Day: Lucky to Win
Cookie Crush
Winning Slot : Mystic Pharaoh
HexaPop Link 2248
Dropping Balls
Crazy Magic Ball
Bird Linked
BigBang PopStar - Pongs Puzzle
Chain One Line
Jewels Crush Fever - Match 3 Jewel Blast
Tropical Fruit Blast
Bubble Spinner
Merge hexagon jewel - Match 3
Random Dice
Jelly Connect
Monster Link- Match Blast
Block Crush
Birds Merge
Idle Dinosaurs
Kitty Blast: Lucky Pet 2022!
Go Jump
Knife Master
Macaron Match
Crazy Cut Money
Mood to Pop
Smash King
Lucky Eggs - Win Big Rewards
Mystery Solitaire Tycoon
candy kaboom
Dice Master: Jump Jump
Mega Jackpot Slot: Cash Winner
Dreamlike Candy:Sweet Merge
Candy Winner
Block Puzzle
Desert tree: Cash Grow Game
Macaron Boom
Word Games: Big Win
Vegas Cash Casino
Cube 2048
Crazy Pop Tree
Vegas Bingo
Street Soccer Game
Real Money Slots & Spin to Win
Bingo County: Amazing 2022
Crazy Bomb
Cookie Macaron
Circus coin pusher
Ludo Magic
Mystery Miner Tycoon
Slots Pop!
Bitcoin Master
Happy Fruit
Blackjack 21: Cash Poker
Forest Puzzle
Hex Puzzle
2048 Lucky Cube
Solitaire legend
Cake Master: Cream Legend
Crazy Fruit Crush
Boom Match
Funny Macaron
Cute Macaron Zumba
Food Merger
Holic Macaron
Dessert Match Kitchen
Macaron Bubble
Bingo Slots
Sea Big Bang
Cute Liner
Puppy Fruit Slice
Crazy Zumba Fruit
Funny Hex Merge
Cash Storm Slots: Real MoneyChatMate
Bingo Magic Zoo: 2022 Journey
Farm Blast - Match Game
Shake Shake Sheep
Cat Party
Lucky Star: Lotto Scratch
Mega Lightning Slots
BitCoin Connect
Bitcoin Master -Mine Bitcoins!
Solitaire Mega : Win Big
Lucky Aquarium
Happy Farm Slots-harvest & win
Crazy Cash Dozer
Maya Merge - 2248 Hexa Puzzle
Bank Bingo Slot
Lucky cube
Diamond Miner: Surprises
Foodie Tiler
Lucky Crush
Lucky Woody Match-Block Blast
Bingo Club-Lucky to win
Nice PopLink 2248
Tiler Master
Food to pop
Fun Block Puzzle Game 2022
Coin Defender
Cash master
Happy Merge Bang
Block BigBang
Dominoes - Royal Master
Royal Knight Slice
Cookie Smash
Candy Pop Star
Lucky For Happy
Happy 2048
Merge Lucky Puppies
Holiday 2048
2248 Linked
Street Football Star
Fruit Spin Blast
Magic Balls
Joy Match 3D
Classic Diamond Slots: Cash
Super Jump
Slot Club
Lucky Tile Match: Triple Crush
Relx cash
Chain Block 3D
Metaverse Merge
Block Master - Brain Games
Fruit Cutting Killer
Gem Smash
Smash Master
Dessert Crush
BuzzVideo-Earn money app
Tunai Instan
ClipClaps - Reward your interest按照目前 Play Store 的審查機制,未來危險病毒 Apps 似乎仍會繼續上架,但其實這些植入惡意程序的 Apps 設計都是千篇一律,為了保護自己的個人資料,認清以下的特徵可以防患未然👇👇👇
+ 1
Source: 香港01