华为应用商店190款游戏携带病毒约930万安卓手机被感染

华为应用商店190款游戏携带病毒约930万安卓手机被感染

个人隐私保护, 黑客新闻

Doctor Web 恶意软件分析师在 华为应用商店-AppGallery 目录中发现了数十款游戏，其中内置了Android.Cynos.7.origin木马。该木马旨在收集用户的手机号码。至少有 9.300.000 位 Android 设备用户安装了这些危险游戏。

该Android.Cynos.7.origin是Cynos程序模块的变型中的一个。该模块可以集成到 Android 应用程序中以通过它们获利。该平台至少在 2014 年就已为人所知。它的一些版本具有相当激进的功能：它们发送优质短信、拦截收到的短信、下载和启动额外的模块，以及下载和安装其他应用程序。我们的恶意软件分析师发现的该版本的主要功能是收集有关用户及其设备的信息并显示广告。

包含Android.Cynos.7.origin的应用程序会要求用户授予拨打和管理电话的权限。这允许木马获得对某些数据的访问。

华为应用商店190款游戏携带病毒约930万安卓手机被感染

当用户授予权限时，木马会收集以下信息并将其发送到远程服务器：

  • 用户手机号
  • 基于 GPS 坐标或移动网络和 Wi-Fi 接入点数据的设备位置（当应用程序有权访问位置时）
  • 各种移动网络参数，如网络代码和移动国家代码；此外，GSM 小区 ID 和国际 GSM 位置区号（当应用程序有权访问位置时）
  • 设备的各种技术规格
  • 来自木马应用程序元数据的各种参数

乍一看，手机号码泄露似乎是一个无关紧要的问题。但实际上，它会严重伤害用户，尤其是考虑到儿童是游戏的主要目标受众。

即使手机号码注册给成人，下载儿童游戏也很可能表明儿童是实际使用手机的人。父母是否希望上述有关手机的数据不仅传输到未知的外国服务器，而且还传输给其他任何人，这是非常值得怀疑的。

我们在 AppGallery 上的 190 款游戏中发现了Android.Cynos.7.origin，例如模拟器、平台游戏、街机游戏、策略游戏和射击游戏。超过 9.300.000 名用户已下载这些游戏（安装数量根据 AppGallery 上列出的每个应用程序的下载数量计算）。其中一些游戏针对讲俄语的用户：他们有俄语本地化、标题和描述。其他的则针对中国或国际观众。下面显示了包含该木马的游戏示例。

安装超过 8.000 次的“Команда должна убить боеголовку”游戏：

华为应用商店190款游戏携带病毒约930万安卓手机被感染
华为应用商店190款游戏携带病毒约930万安卓手机被感染
安装量超过 427.000 的“猫游戏室”游戏：

安装量超过 142.000 的“驾驶学校模拟器”游戏游戏：

华为应用商店190款游戏携带病毒约930万安卓手机被感染

安装量超过 2.000.000 的“快点躲起来”游戏：

华为应用商店190款游戏携带病毒约930万安卓手机被感染

Doctor Web 已将其发现的威胁通知了华为。在本文发布时，包含该木马的应用程序已从 AppGallery 中删除。

适用于 Android 的 Dr.Web 防病毒产品成功检测并删除包含Android.Cynos木马的所有已知修改的应用程序，因此它们不会对我们的用户构成威胁。

IOCs(侵害指标)

病毒样本数据

网址App名称安装包名称SHA-1
http://appgallery.huawei.com/#/app/C1029376013D City Huntingcom.sns.csls3d.huawei8b1de0c1fdea45ff8f4ae250307c0a8f69c3d426
http://appgallery.huawei.com/#/app/C1032779853D Cartoon man Parkourcom.szlh.zhebushikualan.huaweif70f195fd9deffbde2ee812c93b327d07e18443f
http://appgallery.huawei.com/#/app/C1036620713D City Wild Racingcom.zjld.tejimotuoche.huaweifda4bc7b3883b3db3df13b0e1b07ad53bbe22a4d
http://appgallery.huawei.com/#/app/C1044813733d Man action runcom.zjld.zbsklmar.huaweie6024ce99966f4ecaff0efdae7781d9d448b2c79
http://appgallery.huawei.com/#/app/C104633441Ace of sky herocom.hsrj.zhandoujiash.huaweie5ed0eda9513f41b5c9ebd7b14529180a4e5d822
http://appgallery.huawei.com/#/app/C104684815Acrobatics diving trainingcom.zjld.xytsadt.huaweid4c1b4b2a65279b768338f2c0d12b695572b101b
http://appgallery.huawei.com/#/app/C103622351Adventures of Magical Girlcom.yly.mengdongjielong.huawei532b2d05f528ee68a1f89d02fa2477a8fac7c88b
http://appgallery.huawei.com/#/app/C104374449Airplane mastercom.hxy.fzfjam.huaweifec03ced8741a8241fcb5f272ede566a634ba539
http://appgallery.huawei.com/#/app/C103616693All-Star Basketball Championshipcom.cchl.guanlandazuozhan.huaweif4b9517b19f8c4cee7295f653dca4af8f9e62a13
http://appgallery.huawei.com/#/app/C103768237almighty carry companycom.ccsk.quannenglaosiji.huaweid4a1e722adda57f72f9daafdfd338630b48ae55f
http://appgallery.huawei.com/#/app/C104284813Ancient escapecom.yly.ywscae.huawei5599dfea0b274e4edbfdabad72d68e271b99e72d
http://appgallery.huawei.com/#/app/C103895857Anti-terrorism actionscom.xstk.csata.huaweiaeb5f642538bfdf6b2a8eb5cf3214035a634506f
http://appgallery.huawei.com/#/app/C103562987Anti-terrorist police battlecom.sns.qingsongduobi.huaweib1112a4847c4006f126f0a5ab08b191df039adb7
http://appgallery.huawei.com/#/app/C103623983Ants survive in the wildernesscom.cchl.mayishengcunmoniqi.huaweifb1b5402a51ebc00b17670d6e6b49dba28d36704
http://appgallery.huawei.com/#/app/C103171043Armed air attack at seacom.zjld.jisulingyun.huaweif05119b12fc28aca89f48b5a939d6e1928c04bc6
http://appgallery.huawei.com/#/app/C103562027Armed escort prisonerscom.hs.wuzhuangyajieqiufan.huawei7bf6516b2176363de9d7a7993445ede9f697260d
http://appgallery.huawei.com/#/app/C104457167Armed shooting raidcom.hxy.csasr.huaweic4f1405bba22826a69e94ef20763cb664bc3b44c
http://appgallery.huawei.com/#/app/C103233993Armed zombie Tower Defensecom.cchl.baoweixiangrikui.huaweic30291b34ec74128196612b0a80034424de2ea67
http://appgallery.huawei.com/#/app/C104338383Army car transport prisonerscom.sns.wzyjqfactp.huaweif56151b7fd4096f73574717075f6c08e32ff4765
http://appgallery.huawei.com/#/app/C104661821Assassination Snipercom.xstk.yjbzas.huaweifca6cb15168ac7b256da4bbb442cf93050981b61
http://appgallery.huawei.com/#/app/C104338933Assassination time 3Dcom.hsrj.yjbzat.huawei78e48efac48d7ed9ea53a7a7df294da0a97de066
http://appgallery.huawei.com/#/app/C104143713Battle of tankscom.zjld.xintankebot.huaweic80fee5ffccf9ce85ff15b7d085d700ae70aef98
http://appgallery.huawei.com/#/app/C104694107Battlefield assault teamcom.yly.csbat.huawei4a4abab1e69ef629c1c622fd3be280c013e4e9fd
http://appgallery.huawei.com/#/app/C104173375Beach ambulancecom.hsrj.htjydba.huaweib860d5303d8921fed08c5e374483ac127ee2385e
http://appgallery.huawei.com/#/app/C104735997Beach Emergency teamcom.cchl.htyjxz.huaweib936c97eb91bf6071aa38ead5fb5b8ce11d9a0c1
http://appgallery.huawei.com/#/app/C104516919Beach rescue drivingcom.sns.htjydbrd.huawei38ab82696f45fdf52c04d3ba760e8b752b07df6d
http://appgallery.huawei.com/#/app/C104151447Beat the buddycom.szlh.mtcrbtb.huaweia4dbe44e0cbef5db32651050189848e9207e28ed
http://appgallery.huawei.com/#/app/C103162445Brave Ninja saves Princesscom.zjld.jiantoudaren.huawei1a17dd8b6bb1a08ab53b2d096535d251a8d7a8cb
http://appgallery.huawei.com/#/app/C104859673Bumper Car Arenacom.hsrj.debibca.huawei81ae7a0fac2f385b2984669356d92cf7e807fbb7
http://appgallery.huawei.com/#/app/C104621857Busy road drivingcom.cchl.jyztcbrd.huawei7795827b9feb3e6d8a86f30a48686d3fe816ab30
http://appgallery.huawei.com/#/app/C104276919Car battle groundcom.xstk.kbphwcng.huawei6c748786e3d18321b7e2f6c64b578ecb310d5b82
http://appgallery.huawei.com/#/app/C103920731Car destruction warcom.yly.kbphwcdw.huawei195bad41d7c0cee3a388ec072353e9b62c923c67
http://appgallery.huawei.com/#/app/C103920329Car drive mastercom.zjld.jcddcdm.huawei664e47cebb0464339d5e75efb4279c1fa86e131a
http://appgallery.huawei.com/#/app/C103955065Car merge shootingcom.szlh.xxlpdcms.huaweif57efc2ee390c43d42dde0e6dde81a2c5dd1958b
http://appgallery.huawei.com/#/app/C104402277Car shooting defend warcom.yly.xxlpdcsdw.huawei6cc4c02dc12afeadd1e1c41f5a55f9be35aeca72
http://appgallery.huawei.com/#/app/C104114723Cat adventurescom.hxy.xmlxjca.huawei18558dca2734d6b098d91d570e0ca13623e0a851
http://appgallery.huawei.com/#/app/C104415377Cat cute diarycom.szlh.xmlxjccd.huaweiaa2f1784fe24b564fdeb577a340d439661db1571
http://appgallery.huawei.com/#/app/C103823729Cat game roomcom.hs.xiaomaolixianji.huawei79ddb48ac25eb392c9e92dc44d32bbc522e19fae
http://appgallery.huawei.com/#/app/C104429049City car parking testcom.sns.jyztcccpt.huawei30abca107e63b3858bc661f27e2ab56ee3fbb471
http://appgallery.huawei.com/#/app/C104709967City driving mastercom.szlh.jcddcdm.huaweicb7d260684c212c04c39bc96e6e7c4b91c62b516
http://appgallery.huawei.com/#/app/C103530805City Fire Herocom.szlh.kachejiashimoniqi.huawei8cce3b7c41a185919c4e7735176087b2e503741e
http://appgallery.huawei.com/#/app/C103920083City luxury car racingcom.zjld.hbfcclcr.huaweicfc35d28dad612e515a5f90a91fc7b33bcf7d7d6
http://appgallery.huawei.com/#/app/C104377509City mad driftcom.hsrj.piaoyicmd.huaweifac857b82698fbfe0703a589547b786a15550d30
http://appgallery.huawei.com/#/app/C104662137City moto racing 3Dcom.xstk.motuocmr.huawei24f9cec9090f89511ef832f0fc91f03becfd068e
http://appgallery.huawei.com/#/app/C104376897City moto speed battlecom.cchl.motuocmsb.huawei8b92f9eb20ecec1b2ebb64ad182bc03978c7914c
http://appgallery.huawei.com/#/app/C102902799City Overtake Racingcom.sns.csccs.huaweidbda535b5f4b4ad0be5beff735a3d874fa928a83
http://appgallery.huawei.com/#/app/C103536917City police runcom.ccsk.quanmintiaoyue.huaweidee6c5efc0c742d98fceec5a7db459e85b45133f
http://appgallery.huawei.com/#/app/C104402467City props drag racingcom.sns.ttbccpdr.huawei38d90ca290c3e9f4b81d56827b1ae785c9acfd17
http://appgallery.huawei.com/#/app/C103432971City Stickman Herocom.szlh.huochairenshengsuo.huawei47318a439e6cab2f03533237554d54c20f7aebb7
http://appgallery.huawei.com/#/app/C103489571City street racingcom.yly.chengshijietousaiche.huawei0b04b58b75e3177955b018fafdf30ab85333a1f9
http://appgallery.huawei.com/#/app/C104588607City timing racingcom.yly.piaoyictr.huaweia121b13069cdf1b49b23c5e6ae661b733d828a39
http://appgallery.huawei.com/#/app/C104172553Cliff divingcom.ccsk.xytscd.huawei447ef6268110c38d2b877b24dd0aca64fb2a945d
http://appgallery.huawei.com/#/app/C103630117College Bully Fighting Contestcom.yly.jinjidezhengtai.huaweied9f831374d3bef343b4ac3b0e133c87728b58a8
http://appgallery.huawei.com/#/app/C104740819Composite driving racecom.sns.zhsccdr.huaweib92a05e0f4272adde5a8027326f80a27bf33d082
http://appgallery.huawei.com/#/app/C104120419Construction truck simulatorcom.cchl.chanchects.huawei47849d36529860621e0ee70b090394673e8ab318
http://appgallery.huawei.com/#/app/C103554917Construction vehicle simulatorcom.hs.gongchengchejiashimoniqi.huawei32cddb97ea43abea7038c32943eaa9261b0960b7
http://appgallery.huawei.com/#/app/C104374255Dead battlegroundscom.hxy.jssjdbg.huaweiad7a2d73c7ab4617820ceb9275775985b0ea9338
http://appgallery.huawei.com/#/app/C104386329Deadly zombie killercom.zjld.jujijsdzk.huawei562d32c7164f0eb03708cbbd95e05773eb7c9dd7
http://appgallery.huawei.com/#/app/C104429535Delicious restaurantcom.hsrj.djcsdr.huawei5631cb845fe82159d956e1706369b97f3c926895
http://appgallery.huawei.com/#/app/C104503615Dino Island survivalcom.ccsk.ywscdis.huawei761d1ddf7a1c154151fd1063e8bf0360fc55321b
http://appgallery.huawei.com/#/app/C103483157Doomsday Snipercom.sns.shouhujiayuan.huaweifaa4f1155864f9b608155a9f88d6f03dfd8a8210
http://appgallery.huawei.com/#/app/C104609495Drifting speedlegendcom.ccsk.zhensaicheds.huaweicb937b3451084f6d2234141e6ce99cddd3793b82
http://appgallery.huawei.com/#/app/C104456551Drive danger zonecom.hxy.kbphwddz.huawei9a812007f569919aafc9d3a2fd6a6ca1d74b6811
http://appgallery.huawei.com/#/app/C104276697Drive school simulatorcom.hxy.jcdddss.huaweia3a35029a7117ed4f27ed75918c65751743d40d6
http://appgallery.huawei.com/#/app/C104114299Easy driving simulatorcom.hxy.jyztceds.huaweic4db10ee573129d137049fe91dec109dc8e2a5bc
http://appgallery.huawei.com/#/app/C103955747Endless road racingcom.szlh.ttbcerr.huawei10861b6024523a5565d6db7e368686389afeac1a
http://appgallery.huawei.com/#/app/C103716779Escape Jurassiccom.szlh.yewaishengcun.huawei92fbf61b4a4b7f3abefd381a15843a34521eb6ed
http://appgallery.huawei.com/#/app/C104314919Escape terror nuncom.szlh.xiunv.huaweib6c4c01c309533735c4667854a28ad850471d2ae
http://appgallery.huawei.com/#/app/C103383625Evil taste snakecom.ccsk.qiguaideshe.huawei1b72cf9c2cc8bb9af967d450c23cc5f8bd2c4698
http://appgallery.huawei.com/#/app/C104428255Evil towercom.ccsk.chaitaet.huaweidb72c401cd93981689a982a1ee1d028aa451f8f4
http://appgallery.huawei.com/#/app/C104525075Extreme diving mastercom.hsrj.xytsedm.huaweidaceb5776ba8bce6320854608e1a63ef6c2046ba
http://appgallery.huawei.com/#/app/C104744845Fantasy adventurecom.hsrj.yijiaotufa.huaweib1e59c622ee3379953e0127ab25a0a73cc508a06
http://appgallery.huawei.com/#/app/C103243051fast knots mastercom.szlh.jiujieta.huaweia40beed049277026a0f0eb0d051c9defadca8f86
http://appgallery.huawei.com/#/app/C104263663Firefighter simulatorcom.cchl.xfcfs.huawei6de7ebf6a098b446dba0ac72e347dc4cc186d243
http://appgallery.huawei.com/#/app/C104597115Forklift driving simulation Adscom.szlh.chanchefds.huaweif01974eeeec43182b5a17f4753245389794b9e54
http://appgallery.huawei.com/#/app/C104500443Free driving championshipcom.szlh.zhscfdc.huawei5136560049eb1740325494aa708937515cbc0668
http://appgallery.huawei.com/#/app/C104174023Future survival challengecom.hsrj.wlsctzfsc.huawei2ab5263be3b11a343744cc46552ee770ea977f9a
http://appgallery.huawei.com/#/app/C103541409Gangster City Shootoutcom.ccsk.yuanhejinfengbao.huaweif0d91494d8c6dce16e5e3ab2f5771e865d773e51
http://appgallery.huawei.com/#/app/C104710313Gangster crime legendcom.szlh.gtagcl.huawei78d114cf22fffc67c744ee80ff133008a0397099
http://appgallery.huawei.com/#/app/C103956429Gangster evil citycom.sns.mtcrgec.huawei20470de1ef944de2a7918ca17002f33c9df177cd
http://appgallery.huawei.com/#/app/C104551903Gourmet chefcom.xstk.djcsgc.huaweidd2f7b303c80aee38c71bcbf7dd62dd57ea5fcd1
http://appgallery.huawei.com/#/app/C104785369Gunfight elitecom.hxy.zuihaoshejige.huaweif2643a0b517b51c7c18a3e6c853b736e6b0adf28
http://appgallery.huawei.com/#/app/C104668813High speed championshipcom.hxy.gdschsc.huaweic42b5e86ee2d1c01fb210566d296a016ce31ef57
http://appgallery.huawei.com/#/app/C103709043Home defend battlecom.szlh.jiqirenduizhan.huaweid5dc75912e039d95a5723f1d17fdd59fafb2e1ec
http://appgallery.huawei.com/#/app/C104609347Hope of doomsdaycom.ccsk.jujijshod.huawei24105bc679bca09964593f768f334ca25a833a5e
http://appgallery.huawei.com/#/app/C103144599Hostage rescue operationcom.yly.yjbz.huawei2edd4fc0d2b7bc3ac7e56e74a3baf58f36272b85
http://appgallery.huawei.com/#/app/C103250285Hot Crash Racingcom.cchl.huitiaoyuedeqiche.huawei394111215a381baef07ab43f7e343f9b4b451db2
http://appgallery.huawei.com/#/app/C104314609Influencer dress up mastercom.szlh.wanghong.huawei582a02e0a5d98c2970a524f6ca97c13d8c4defc0
http://appgallery.huawei.com/#/app/C104385157Island survival guidecom.xstk.haidaoisg.huaweid294206a3760ea7c823d2b669dc76cd23a0781a2
http://appgallery.huawei.com/#/app/C103248961Lethal gun battle of pixel mancom.sns.feiyuedamaoxiany.huaweid10a7da60bffee2786d570112fa5d6e0ca6c62da
http://appgallery.huawei.com/#/app/C104384573Living dead battlefieldcom.xstk.yqdjsldb.huawei587d0c9138a53b327afe69c090bf977757551bd3
http://appgallery.huawei.com/#/app/C104010165Luxury car city racingcom.hsrj.gdsclccr.huaweib4c11c9c19e53285ab245da6529bb9adb1faedc4
http://appgallery.huawei.com/#/app/C104685257Luxury car crash simulatorcom.zjld.kbphwlccs.huaweib69c0291251be552c6c9ff8161abc0c5d7323c75
http://appgallery.huawei.com/#/app/C103499657Luxury car racingcom.zjld.guadangsaiche.huawei8d5f8c2f4ba3230fa927d497b9160294058658e5
http://appgallery.huawei.com/#/app/C103432959Luxury car racing Hurricanecom.hs.haohuamotuoche.huawei553676688a6c0c4cde71ee2b2639ef4d14a29bd4
http://appgallery.huawei.com/#/app/C104469559Luxury car ultimate speedcom.cchl.gdsclcus.huawei0cf0b20ab0664443e77ca3202d058b270b8dc2aa
http://appgallery.huawei.com/#/app/C104524785Mafia crime citycom.hsrj.gtamcc.huawei77d9e5da03e66bf7d4fc96c55d5e1283f67e870d
http://appgallery.huawei.com/#/app/C103516885Master pilotcom.szlh.fangzhenfeijijiashi.huawei0fa877a17adf054ad5dfb4df07a66954057417f2
http://appgallery.huawei.com/#/app/C104263145Metal dead missioncom.cchl.hjdtmdm.huaweif2742710a4d6aec0fddda234101159b4111fab3c
http://appgallery.huawei.com/#/app/C102902777Metal Slug Armorcom.sns.jsdtzj.huaweia0cb1232a1bcff9a16ea0a409f42b7ed6dab8aae
http://appgallery.huawei.com/#/app/C104277411Midnight Speed Racecom.xstk.gdscmsr.huawei00f5d3e40216842c107456f81008b355175418bd
http://appgallery.huawei.com/#/app/C103777397millionaire simulatorcom.sns.woyaodanglaoban.huaweie7ad32238c612b3905ba4362f5e4c38b7cd8cbe6
http://appgallery.huawei.com/#/app/C104744949Motorcycle city free drivingcom.hsrj.nmotuomcfd.huawei391eed9c22041677d311f912212f6b49dd716980
http://appgallery.huawei.com/#/app/C104517329Motorcycle lethal racingcom.sns.motuomlr.huawei64be16a6c0f829515f2049e6e5ab31b6200f4440
http://appgallery.huawei.com/#/app/C104284495Naval battle agecom.yly.gzdzznba.huaweid99d8e5c70f867492e9908ddac09f43f7393266c
http://appgallery.huawei.com/#/app/C103247935Ninja Legion place battlecom.hs.tuanjierenzhe.huawei245778ef52e511ce3d317247a80f1f42c3160d66
http://appgallery.huawei.com/#/app/C104469713Ninja rescue mastercom.xstk.jtdrnrm.huaweiddd820fe425d143298e6a2d5358c000ef129b841
http://appgallery.huawei.com/#/app/C104740673Offroad driving simulatorcom.sns.panshanods.huaweie6127854280c8ed57b02e31ae6b92691e721902e
http://appgallery.huawei.com/#/app/C104622045Operation firewirecom.sns.zuihaosheji.huawei0d5c4057b6a1e08d0b90158453a27fc3c4a5be43
http://appgallery.huawei.com/#/app/C103892267Operation Snipecom.hxy.yjbzos.huawei84aaa479668304a8c886e110bb945980362edc72
http://appgallery.huawei.com/#/app/C103773473Parking simulatorcom.ccsk.jiayouzhantingche.huaweie8bd8be32ed3aebe83ab17f64bc96aa8cd62618c
http://appgallery.huawei.com/#/app/C103826211Perfect kitchencom.cchl.dingjichushi.huawei6f9b0f0a0fae1e8da1b45c792565030832baac3d
http://appgallery.huawei.com/#/app/C104715533Pilot test simulatorcom.ccsk.fzfjpts.huawei1dc9041c623175e62b793499f877dcdbe6c7a02d
http://appgallery.huawei.com/#/app/C104010037Pirate Island Survivalcom.ccsk.haidaopis.huawei2f43b0a927c6127d8d1c3a920876b853c2b703ad
http://appgallery.huawei.com/#/app/C103489913Pirate island wild survivalcom.hs.zuihoudehaidao.huawei61776ecc091a7097162ea59f0d870d718052fb75
http://appgallery.huawei.com/#/app/C104480805Pixel battleground legendcom.zjld.xsrpdpbl.huawei5a9211ccec1a1a2cf78a9af6ed6d2ee891994cf7
http://appgallery.huawei.com/#/app/C103895545Pixel city survivalcom.xstk.xiangsuchijipcs.huawei08126e7c6dbe785d9d7ab62f2682a62f8b629351
http://appgallery.huawei.com/#/app/C104596969Pixel conflict battlefieldcom.szlh.btlxjpcb.huawei3c98fc7efe6685bf258fb592b268f97ecb04db72
http://appgallery.huawei.com/#/app/C103923171pixel desperate fightcom.yly.xsrpdpdf.huaweiee21e5dc0bc9fd97a4f6b8f0f5600fb698005806
http://appgallery.huawei.com/#/app/C103302997Pixel field survival gun battlecom.sns.mhbaoshidazuozhan.huaweifa259b2332c3df5b49bf39442e0a0823efda8103
http://appgallery.huawei.com/#/app/C104669165Pixel killer city battlefieldcom.hxy.xsrpdpkcb.huawei892d2575d5780703ff537f14d9dbd99a9c8fc343
http://appgallery.huawei.com/#/app/C104322121Pixel mad battle royalecom.ccsk.xsrpdpmbr.huawei0418c85691260d9f5bf97da4287a20a94197d724
http://appgallery.huawei.com/#/app/C104587691Pixel man city shootingcom.zjld.xiangsupmcs.huaweie4be4c31d4a086510a8228bdca0e912f9bd501ef
http://appgallery.huawei.com/#/app/C104633213Pixel monster warcom.hsrj.guaishoupmw.huaweib5f60efdfe0f3ababb21a60165b9cf875760816b
http://appgallery.huawei.com/#/app/C103406413Pixel multiplayer battle royalecom.zjld.bentulixianji.huaweid22dba8ed5cca602fcb3671fcd75bccf73893626
http://appgallery.huawei.com/#/app/C103956069Pixel shoot battle groundcom.sns.btlxjpsbg.huaweie121ac6bc76790ba5188985e4e6796059c706385
http://appgallery.huawei.com/#/app/C104385643Pixel shooting battlefieldcom.zjld.xiangsuchijipsb.huaweifedbbf0414a4c71d66cccabe52afcca3180a7c0b
http://appgallery.huawei.com/#/app/C104573043Pixel shooting worldcom.hxy.xiangsuchijipsw.huaweibef0706efeebbd244aef756e7aefb2b3c3830eae
http://appgallery.huawei.com/#/app/C104428475Pixel wilderness shootoutcom.ccsk.btlxjpws.huaweidcdcbed79aa270cdf65b857f940cc74c15157bf0
http://appgallery.huawei.com/#/app/C103459463Pixel Zombie Doomsday Disastercom.sns.jiangshiyefengkuang.huawei8a294c8557cdb00ce277a36a5fe5242de907894e
http://appgallery.huawei.com/#/app/C104284303Primal smash fightcom.zjld.ttlxdzzpsf.huawei741fa91c2be3093e6edfc553a51038eceb0368ba
http://appgallery.huawei.com/#/app/C102402091Primitive people fight in disordercom.hsrj.rsrdld.huaweifc39865027a95e8a72fdef44dd5fcd879336bef8
http://appgallery.huawei.com/#/app/C104694047Prisoner escorted drivingcom.yly.wzyjqfped.huawei8d86ca23d20d8185009b35e1ec66f130b99cc03a
http://appgallery.huawei.com/#/app/C104264009Racing maniacom.hxy.zhscrm.huaweib5f93f3162ebf4bfa2f60c38e1e0faceb9516c92
http://appgallery.huawei.com/#/app/C102913833Racing Road Shootingcom.sns.scglsj.huawei36366fb656378c21fc24651383a16e5e8f5937ed
http://appgallery.huawei.com/#/app/C104115907Real airplane pilotcom.xstk.fzfjrap.huawei276fbd448ffa8071def70d6043c4a823093b0d0c
http://appgallery.huawei.com/#/app/C104401657Real vehicle driving mastercom.yly.chanchervdm.huaweif70b2faa1f34ba0318bc4b08235f88ad7a0967cd
http://appgallery.huawei.com/#/app/C104503885Real war front simcom.ccsk.bingrenrwfs.huawei626d2d93f70b55c5440ff49d641bfdec9cacd04b
http://appgallery.huawei.com/#/app/C104120063Revenge zombie invasioncom.xstk.jssjrzi.huawei0675e69a6ea1a212a2a93ef8a1fc8b1201d7ab89
http://appgallery.huawei.com/#/app/C104337727Rome defensecom.hsrj.luoma.huaweia82f2fa8b97a864fa1cd701a4ff57b640ef5f6a0
http://appgallery.huawei.com/#/app/C104500319Royal snipercom.szlh.yjbzrs.huaweid5e48f2d7127b8f90d268968367f2f51be1583a5
http://appgallery.huawei.com/#/app/C104010351Run guyscom.hsrj.zbsklrg.huawei107c84e8727a42815d67b56ff7cdfb15d36ac06d
http://appgallery.huawei.com/#/app/C104143439Save the princesscom.yly.jtdrstp.huawei7ec611a45b59c9797416d0902a6ca5282487fe50
http://appgallery.huawei.com/#/app/C104144211School fightercom.zjld.xygdsf.huawei4ee80638496df3873bd10d5cd601e6deb475f5c1
http://appgallery.huawei.com/#/app/C104551477School Kung Fu showcom.xstk.xygdskfs.huawei0924d1455f80434dffa110d05fea6735f09c6e20
http://appgallery.huawei.com/#/app/C104469969Secret transfer missioncom.xstk.wzyjqfstm.huaweid8f274f22d55fc0a4d7a515b99a5991ca1deb6ff
http://appgallery.huawei.com/#/app/C104322275Shoot it downcom.ccsk.jidayiqie.huaweie65dcb0e3ebb5b95fffb8d45f7145ce185f610e1
http://appgallery.huawei.com/#/app/C104785529Sky FireWire battlefieldcom.hxy.feijishejisfwb.huawei1ada19c422266ae7e29b1efb0e185c1d7d4762aa
http://appgallery.huawei.com/#/app/C103763951Soldiers set warcom.sns.ArmyBattle.huawei17c8331ff2fd450d2ab8c8c0dd2e6c2df306cb41
http://appgallery.huawei.com/#/app/C104735483Soldiers united battlecom.cchl.bingrentjzy.huaweibd4b2cb225c45ef1095892e4b4a136d4524a751c
http://appgallery.huawei.com/#/app/C104810215Space Escortcom.zjld.zhandoujise.huaweibef6cff2df62b4a5db8fa94149a66b12eb625096
http://appgallery.huawei.com/#/app/C104622153Special forces fire missioncom.sns.feijishejisffm.huaweie0a4240ee150654ac3976aaa135856a39bf26a8c
http://appgallery.huawei.com/#/app/C103700205Spider Stickman City Battlecom.zjld.huochairenshengsuo.huawei37358755e8a65025662726eaedcd9138ac3dbd2a
http://appgallery.huawei.com/#/app/C104483841Spider superman city herocom.yly.hcrssssch.huawei4a038648bf6b5f8f5fc3383f16465d799c9d987b
http://appgallery.huawei.com/#/app/C104415455Steel tank chaos battlecom.szlh.xintankestcb.huaweib02424c6e3b561c12526dc2fcc222c7ca03aeb4e
http://appgallery.huawei.com/#/app/C103458831Stickman battle zombiescom.cchl.jiayuangongfangzhan.huawei5d6e0071b7ec7dc1779a97c92ede41045afa89f0
http://appgallery.huawei.com/#/app/C104711591Stickman city legendcom.ccsk.hcrssscl.huawei9342d3d66b2098663d1b0698b663218f781156f6
http://appgallery.huawei.com/#/app/C104174325Stickman sniper elitecom.szlh.hcrjjzzsse.huawei5271c37c19c7a247c862c7112d7dea8db49ff046
http://appgallery.huawei.com/#/app/C103499973Stimulating roller coastercom.zjld.fengkuangyouleyuan.huawei6837238bdc8c1905c1cfbfec3ca39a8e586677cc
http://appgallery.huawei.com/#/app/C104587903Stray in dead islandcom.zjld.shengcundaosidi.huawei3379888d53fd51effd67ff9fbc2119d68d97eaf3
http://appgallery.huawei.com/#/app/C104469347Street car drivingcom.cchl.jcddscd.huawei63148f90fb8e8079fadb3ce493674fe1cb190df2
http://appgallery.huawei.com/#/app/C104781237Street challenge racecom.xstk.zhensaichescr.huawei6670503a1cf8b08e8929e711d3015899c89fd80a
http://appgallery.huawei.com/#/app/C103893501Street shuttle racecom.hxy.motuochessr.huawei5a192f3a6503ab550032023aec571d7ee6712c07
http://appgallery.huawei.com/#/app/C104153509Super power police runcom.sns.ydpksppr.huawei828e546a47bbb0d3736875f6a2ee00888e47df0b
http://appgallery.huawei.com/#/app/C104590439Survival on uninhabited islandcom.yly.haidaosoui.huaweieb047267a7f24b5747d382b16127a8fa01fda801
http://appgallery.huawei.com/#/app/C104284205Swat War Conflictcom.zjld.csswat.huawei84f82cdee151a378799b1f932d1c858b06a0ae3b
http://appgallery.huawei.com/#/app/C104306487Tank endless battlecom.sns.tkpdzteb.huaweib544cfa04bbc4c543dedba058612c15409a85c1f
http://appgallery.huawei.com/#/app/C104572649Tank joint warcom.hxy.xintanketjw.huawei372fb1d75294a7c410c5a1c56491bc87979f1839
http://appgallery.huawei.com/#/app/C103441719Tanks global hegemonycom.cchl.tankepodizhen.huaweicc2b9dcd658316f87f35dd75d03c1e3f1ab2a870
http://appgallery.huawei.com/#/app/C103343939The Adventures of the Tribal Princecom.ccsk.jimudeshijie.huaweicc6535e4e9e7e15ab25a3eefda7ddd59101ceb3d
http://appgallery.huawei.com/#/app/C104152055Top restaurantcom.sns.djcstr.huaweic84d75738aa2ddeaef76f4ca25dcb0679b1668c1
http://appgallery.huawei.com/#/app/C104022561Transfer Prisoner Actioncom.cchl.wzyjqftpa.huaweif3a2abc0b87efcdbb40baeed076272d921d8b7a9
http://appgallery.huawei.com/#/app/C104548907Transform props racing carscom.cchl.ttbctprc.huawei6c432c9fcef93f885dde2ebe7229d4eff84a8514
http://appgallery.huawei.com/#/app/C103419061Urban thugs legendcom.zjld.mutouchaoren.huawei470d7242731bb388965bbb5ff054a34784b50a16
http://appgallery.huawei.com/#/app/C104377383Vegas gangster legendcom.cchl.gtavgl.huawei2c73e62f29675ac96f49eadc2ec10351568bd3da
http://appgallery.huawei.com/#/app/C103503313Vehicle driving testcom.yly.cheliangjiashikaoshi.huaweib7ba41e8b9916f760413b7246238ac541baf5335
http://appgallery.huawei.com/#/app/C103824193Warship commandcom.hs.gaizhuangdazuozhan.huaweib084b4415bd7e8662028c9f372b5a881b87283cf
http://appgallery.huawei.com/#/app/C104174827Western snipercom.ccsk.xbhyqsws.huawei66a582ab71624e06ee65b59ee2dcd9892c95dbf5
http://appgallery.huawei.com/#/app/C104777031Wild battlegroundcom.xstk.shengcunwb.huawei700d4672266d6f5d0389c160f7c51a0e2145b096
http://appgallery.huawei.com/#/app/C104484259Wild planetcom.yly.wlscwp.huawei4dca550b503de2728db030f8cd92fbe889030f17
http://appgallery.huawei.com/#/app/C103384303World Tank Championshipcom.yly.tankepodizhe.huaweied02f8a71a39667da7315155d924a12b0fc083cb
http://appgallery.huawei.com/#/app/C103295249Zombie crisis on earthcom.hs.yiqidajiangshi.huawei7d5dae3505c05374a520af127c285ea159d9d2bb
http://appgallery.huawei.com/#/app/C104143151Zombie death citycom.yly.jujijszdc.huawei64eff308776e31534b07d0e03a530516e30fafa7
http://appgallery.huawei.com/#/app/C103419373Zombie Doomsday Invasioncom.szlh.dazhanjiangshijuntuan.huawei4900a43d29501a10d4d223ad5ed4e3188de1d630
http://appgallery.huawei.com/#/app/C103823385Zombie doomsday Survivalcom.cchl.jiangshitafang.huaweiad94b5f60864ae7fc45465ad1d3572a7d11c39d3
http://appgallery.huawei.com/#/app/C104010077Zombie Doomsday warcom.ccsk.yqdjszdw.huawei8153376ecbb60c8533c11faee9435d0568c2e93a
http://appgallery.huawei.com/#/app/C103553977Zombie Shootout Battle Royalecom.sns.fengkuanglueshizhe.huawei14eb8161f37667260fe4946ad3ef4bbb3bb9fd28
http://appgallery.huawei.com/#/app/C103144801Команда должна убить боеголовкуcom.yly.elshjdt.huawei0ff27de04098aaf0420f37e1c96f2770e399656b
http://appgallery.huawei.com/#/app/C103241505элитный отряд на поле бояcom.ccsk.hejinfengbao.huawei98a6f3a393f2b0ab5a43662f6cdba1af89b431a1
http://appgallery.huawei.com/#/app/C101190899快点躲起来com.game.cfquickhidenew.huaweibb86d27c4e6f2e7858eb59d41e0fd911afce085a

from

关于Android.Cynos.7.origin病毒

加入 Dr.Web 病毒库时间： 2021-03-26

新增病毒说明： 2021-11-22

  • SHA1 哈希值：cfc35d28dad612e515a5f90a91fc7b33bcf7d7d6

描述

Android.Cynos.7.origin是 Cynos 软件模块版本之一的检测名称。它们可以嵌入到 Android 应用程序中以通过它们获利。此修改的主要功能是收集有关用户及其移动设备的信息并展示广告。

操作规程

在启动包含Android.Cynos.7.origin模块的应用程序时，它会要求用户授予拨打和管理电话的权限。该权限允许木马获取有关用户手机号码的信息：

华为应用商店190款游戏携带病毒约930万安卓手机被感染

Android.Cynos.7.origin随机选择下面列出的 C&C 服务器之一并连接到它：

hxxp://dns1[.]sdkbalance[.]com
hxxp://dns2[.]sdkbalance[.]com
hxxp://dns3[.]sdkbalance[.]com

作为响应，该模块接收一个服务器地址，将收集的数据发送到该地址，并从该地址下载显示广告所需的参数。如果由于某种原因无法接收所需的地址，Android.Cynos.7.origin将使用以下硬编码在应用程序代码中的地址：

  • hxxp://47[.]92.196.227 — 将收集的数据和日志事件传输到的服务器
  • hxxp://39[.]100.129.237 — 接收显示广告所需配置的服务器

木马收集以下信息并发送给服务器：

  • 移动运营商的 MCC 和 MNC 代码
  • 基于 GPS 坐标或移动网络和 Wi-Fi 接入点数据的设备位置（当应用程序有权访问位置时）
  • 移动运营商的 MCC 和 MNC 代码
  • GSM 小区 ID 和 GSM 位置区号（当应用程序有权访问位置时）
  • 木马应用生成的设备ID（一些木马修改使用设备的IMEI作为其ID；一些修改还发送IMSI代码，如SHA1：8cce3b7c41a185919c4e7735176087b2e503741e）
  • 设备型号
  • 生产厂家
  • 一个 Android SDK 版本
  • 屏幕分辨率
  • 互联网连接类型
  • CPU名称
  • 应用程序的 apk 文件 md5 哈希
  • 应用程序版本
  • companyID —来自应用程序元数据的参数
  • appID — 来自应用程序元数据的参数

在发送数据之前，木马会从服务器接收一个公共 RSA 密钥。它使用随机生成的密钥通过 AES 算法对数据进行加密。反过来，这个密钥用之前获得的公共 RSA 密钥加密。然后，加密的密钥与数据一起在请求的SecurityKey标头中发送到服务器。

除了收集数据，该模块的另一个功能是在包含它的应用程序内显示广告。它使用不同的 SDK 来展示广告，具体取决于使用哪个应用目录来传播带有Android.Cynos.7.origin 的应用。例如，如果是AppGallery目录，则使用com.Huawei.hms.ads。它将 com.Vivo.mobilead 与 VIVO 目录一起使用，将 com.Xiaomi.ad 与 Mi 商店目录一起使用。对于 GameCenter 目录，它使用 com.heytap.mobad。

from

转载请注明出处及链接

Leave a Reply

您的电子邮箱地址不会被公开。 必填项已用 * 标注