Android 幾乎每隔一陣子,就會傳出 Apps 內藏惡意病毒、惡意程式碼的消息,這次是由國外安全機構 Zimperium 發現,共有超過 130 款 Android Apps 內藏一個名叫 GriftHorse 的惡意病毒,會誘導用戶誤觸付費訂閱,進而獲取金錢,而且已經有一千多萬台裝置進行安裝,影響範圍可說非常大。
上百款 Android Apps 被發現內藏 GriftHorse 惡意病毒
根據 Zimperium 說明,他們發現 Google Play 有 130 多個內藏 GriftHorse 的惡意應用程式,有一些確實提供相關功能,有一些則完全沒用,當用戶安裝之後,它就會透過一些誘導步驟,來竊取用戶的金錢。
誘導方式大致如下,用戶安裝後會被中獎通知轟炸,手機每小時至少會跳出 5 次,告知請立即領取,當用戶經不起誘惑點擊,此惡意應用程式就會根據其 IP 位置,自動產生當地語言的網頁,並要求輸入電話號碼進行驗證,實際上這號碼不是驗證,而是自動訂閱付費服務,用戶當下不會知道,等到收到電話帳單才會看到這筆訂閱費用:
這些應用程式從去年 11 月就有了,每一位用戶每月平均被收取 42 美元,意味著至今總竊取金額可能高達數億歐元。
Zimperium 調查,受影響的裝置遍佈全球,多達 70 個國家,而且地圖上的紅點也包含台灣,不過大多用戶還是位於歐美:
為此也已經通知 Google 刪除這些 App,不過他們不確定是否還有其他內藏 GriftHorse 的應用程式,因此當用戶下載新 Apps 時,請注意是否有類似誘導步驟出現,
以下是已發現有問題的 Apps:
- 100% Projector for Mobile Phone
- 3D Camera To Plan
- Amazing Sticky Slime Simulator ASMR\u200f
- Amazing Video Editor
- AR Phone Booster – Battery Saver
- Bag X-Ray 100% Scanner
- Battery Live Wallpaper 4K
- Bus – Metrolis 2021
- Bus Driving Simulator
- Call Blocker-Spam Call Blocker
- Call Blocker-Spam Call Blocker
- Call Recoder Pro
- Call Record Pro
- Call Recorder iCall
- Caller ID & Spam Blocker
- CallerID
- Caller-x
- CallHelp: Second Phone Number
- Chat Translator All Messengers
- CIAO – Live Video Chat
- Cinema Hall: Free HD Movies
- Clap
- Clap To Find My Phone
- ClipBuddy
- Color Call Changer
- Coupons & Gifts: InstaShop
- CutCut Pro
- Daily Horoscope & Life Palmestry
- Dating App – Sweet Meet
- Easy Bass Booster
- Easy TV Show
- Ela-Salaty: Muslim Prayer Times & Qibla Direction
- English Arabic Translator direct
- Face Analyzer
- FastPulse – Heart Rate Monitor
- FindContact
- Fingerprint Changer
- Fingerprint Defender
- Fitness Point
- Fitness Trainer
- Forza H Mobile 4 Ultimate Edition
- Free Calls WorldWide
- Free Coupons 2021
- Free Islamic Stickers 2021
- Free Translator Photo
- FX Keyboard
- Geospot: GPS Location Tracker
- GetContacter
- GPS Phone Tracker – Family Locator
- Handy Translator Pro
- Heart Rate and Meal Tracker
- Heart Rate and Pulse Tracker
- Heart Rate Pro Health Monitor
- Heart Rhythm
- HOO Live – Meet and Chat
- Horoscope : Fortune
- Hunt Contact
- iCare – Find Location
- iConnected Tracker
- Icony
- Idle Gun Tycoo\u202an\u202c
- Instant Speech Translation
- Intelligent Translator Pro
- iSalam Qibla Compass
- iTranslator_ Text & Voice & Photo
- Keyboard Themes
- Keyboard: Virtual Projector App
- KFC Saudi – Get free delivery and 50% off coupons
- Language Translator-Easy&Fast
- Launcher iOS 15
- Launcher iOS for Android
- Lifeel – scan and test
- Live Mobile Number Tracker
- Live Wallpaper & Background
- Loca – Find Location
- Locatoria – Find Location
- Locker Tool
- Ludo Game Classic
- Ludo Speak v2.0
- Mine Easy Translator
- Mobile Things Finder
- My Chat Translator
- My Locator Plus
- OFFRoaders – Survive
- Parallax paper 3D
- Phone Caller Screen 2021
- Phone Finder by Clapping
- Phone Search by Clap
- PhoneControl Block Spam Calls
- Photo Effect Pro
- Photo Lab
- Piano Bot Easy Lessons
- PikCho Editor app
- Plant Camera Identifier
- Pony Video Chat-Live Stream
- Proof-Caller
- Prookie-Cartoon Photo Editor
- Pulse App – Heart Rate Monitor
- Qibla AR Pro
- Qibla Compass
- Qibla Compass (Kaaba Locator)
- Qibla correct Quran Coran Koran
- Qibla direction watch (compass)
- Qibla Finder – Qibla Direction
- Qibla Pass Direction
- Qibla Ultimate
- QR Code Reader – Barcode Scanner
- QR Reader Pro
- R Circle – Location Finder
- Racers Car Driver
- Safe Lock
- Scanner App Scan Docs & Notes
- Scanner Pro App: PDF Document
- Screen Mirroring TV Cast
- Second Translate PRO
- Skycoach
- Slime Simulator
- Smart Call Recorder
- Smart Spot Locator
- SnapLens – Photo Translator
- Soul Scanner – Check Your
- Squishy and Pop it
- Stickers Maker for WhatsApp
- Street Cars: pro Racing
- TagsContact
- Translate It – Online App
- Truck – RoudDrive Offroad
- TrueCaller & TrueRecoder
- Vector arts
- Video & Photo Recovery Manager 2
- VPN Zone – Fast & Easy Proxy
- What’s Me Sticker
- WiFi Unlock Password Pro X
- You Frame
- Zodiac : Hand
- Быстрые кредиты 24\7