手機病毒｜新型木馬假扮遊戲偷銀行個資、再多193個Apps揭毒快刪

手機病毒｜在各單位的通力合作之後，Android 的保安環境雖然比起從前已經有莫大改進，但黑客總找到新方法入侵手機，而最近一個偽裝成小遊戲的木馬程序「SpinOK」就成為 Android 手機用家們的最大煩惱。

SpinOK 木馬偽裝小遊戲、背後偷資料竊錢

「SpinOK」本身是作為一個具有實際功能的營銷類型 SDK 模組被放到網上，表面上它可以讓開發者在 Apps 中加入迷你遊戲、任務系統和抽獎來維持用戶對應用程序的興趣，但背後卻是另一回事。

在確認於一部用家使用中的手機安裝後，SpinOK 就會發送一個包含大量受感染手機訊息的請求，再從至遠端的伺服器下載一個 URL 列表、在背景執行帶有惡意程序，其中包括提取手機中的特定文件、從設備上傳文件，或複製和替換剪貼簿內容，在此過程中，不單用戶的機密資料可能外洩，銀行帳戶密碼以及加密貨幣錢包登入資料都有可能被竊取，做成實際的財產損失。

再發現多 193 個 Apps 中招、部份仍未下架

在加入 SpinOK 的 App 初始運行時，會先收集一般實體手機都有的數據，例如陀螺儀、磁力計等等，以確定它是在一部真實的手機上運行，這種驗證機制，可避免 SpinOK 在開發階段就被 App 開發者發現其病毒特性，甚至可以成功令受感染的 Apps 成功在 Google Play 上架。

出於此「防護機制」，被植入 SpinOK 的 Apps 往往不能由開發者以至 Google Play 的審查系統察覺，直到被下載至用戶手機作惡才被發現，但可能已經為時已晚。

而繼 Dr.Web 上星期的報告之後，另一調查機構 CloudSEK 亦發表報告，指出他們在 Google Play 上發現多 193 個帶有 SpinOK 程序的 Apps，累計下載人數達到 3000 萬以上，有不少更仍然被保留在 Google Play 之上，各位最好比照一下此名單，如見到相同的 Apps 就要立即刪除。

Chip Winner 2048

iSecurity - Virus Cleaner

Quick Loan Pro

Calculator Lock – Photos Vault

Pixel Battle

Ztime:Earn cash rewards easily

Pop Stone 2 - Match 3 Game

Gem Puzzle

Real Money:Play Games Earn

Vast VPN - Secure VPN Proxy

Fast Booster Box

Channel3

Make Money - Game Time

Woohoo - Real Cash Games

Earn Money: Squid Game

Cash Game: Money Puppy

LuckyYou

Hello VPN-Fast & Secure

Dong Bao

HotBuku-Alat Pembaca Novel Profesional dan Populer

Yeloli Princess Makeup

Mnogo Monet

Yeloli Princess Makeup

UangNyata:hasilkan & permainan

Fast Loan Plus

Crazy Christmas Tree

Pop Diamonds

Cash All - Earn real money

Merge snack-Overfood

Vegas Coin Pusher

Crazy Cut Money

Lucky Cashman-Real Money&Paid

Lucky Slots: Real Money& Spin

TappyCoins

Pet Connect - cute pets match

Lucky Coin Pusher -3D

Money Tree Garden

Chips Winner

Mega Win Slots

SuperFastVPN-UnlimitedVPN

Magical Pet:Pop Match

Neutral Solitaire

BTC Linked

Lucky Dog Videos

Hexa Link - 2248 Connect Puzzle

Ganho Casual

Bitcoin 2 Moon

Pop Pop Balls

Fruits Legend: Farm Frenzy

Fruit Bubble Smash

BTC Fall

Sweet Fruit Smash

Funny Hoop

Go Break

Step Going

Funny Block

Squid Gem

Lucky Cube Blast

Cube Master 3D

Merge Crazy Bal

Grand Win Solitaire

ChipWin To 21:Merge game

Bubble Shooter Hero

Bingo Day: Lucky to Win

Cookie Crush

Winning Slot : Mystic Pharaoh

HexaPop Link 2248

Dropping Balls

Crazy Magic Ball

Bird Linked

BigBang PopStar - Pongs Puzzle

Chain One Line

Jewels Crush Fever - Match 3 Jewel Blast

Tropical Fruit Blast

Bubble Spinner

Merge hexagon jewel - Match 3

Random Dice

Jelly Connect

Monster Link- Match Blast

Block Crush

Birds Merge

Idle Dinosaurs

Kitty Blast: Lucky Pet 2022!

Go Jump

Knife Master

Macaron Match

Crazy Cut Money

Mood to Pop

Smash King

Lucky Eggs - Win Big Rewards

Mystery Solitaire Tycoon

candy kaboom

Dice Master: Jump Jump

Mega Jackpot Slot: Cash Winner

Dreamlike Candy：Sweet Merge

Candy Winner

Block Puzzle

Desert tree: Cash Grow Game

Macaron Boom

Word Games: Big Win

Vegas Cash Casino

Cube 2048

Crazy Pop Tree

Vegas Bingo

Street Soccer Game

Real Money Slots & Spin to Win

Bingo County: Amazing 2022

Crazy Bomb

Cookie Macaron

Circus coin pusher

Ludo Magic

Mystery Miner Tycoon

Slots Pop!

Bitcoin Master

Happy Fruit

Blackjack 21: Cash Poker

Forest Puzzle

Hex Puzzle

2048 Lucky Cube

Solitaire legend

Cake Master: Cream Legend

Crazy Fruit Crush

Boom Match

Funny Macaron

Cute Macaron Zumba

Food Merger

Holic Macaron

Dessert Match Kitchen

Macaron Bubble

Bingo Slots

Sea Big Bang

Cute Liner

Puppy Fruit Slice

Crazy Zumba Fruit

Funny Hex Merge

Cash Storm Slots: Real MoneyChatMate

Bingo Magic Zoo: 2022 Journey

Farm Blast - Match Game

Shake Shake Sheep

Cat Party

Lucky Star: Lotto Scratch

Mega Lightning Slots

BitCoin Connect

Bitcoin Master -Mine Bitcoins!

Solitaire Mega : Win Big

Lucky Aquarium

Happy Farm Slots-harvest & win

Crazy Cash Dozer

Maya Merge - 2248 Hexa Puzzle

Bank Bingo Slot

Lucky cube

Diamond Miner: Surprises

Foodie Tiler

Lucky Crush

Lucky Woody Match-Block Blast

Bingo Club-Lucky to win

Nice PopLink 2248

Tiler Master

Food to pop

Fun Block Puzzle Game 2022

Coin Defender

Cash master

Happy Merge Bang

Block BigBang

Dominoes - Royal Master

Royal Knight Slice

Cookie Smash

Candy Pop Star

Lucky For Happy

Happy 2048

Merge Lucky Puppies

Holiday 2048

2248 Linked

Street Football Star

Fruit Spin Blast

Magic Balls

Joy Match 3D

Classic Diamond Slots: Cash

Super Jump

Slot Club

Lucky Tile Match: Triple Crush

Relx cash

Chain Block 3D

Metaverse Merge

Block Master - Brain Games

Fruit Cutting Killer

Gem Smash

Smash Master

Dessert Crush

BuzzVideo-Earn money app

Tunai Instan

ClipClaps - Reward your interest按照目前 Play Store 的審查機制，未來危險病毒 Apps 似乎仍會繼續上架，但其實這些植入惡意程序的 Apps 設計都是千篇一律，為了保護自己的個人資料，認清以下的特徵可以防患未然👇👇👇