目录导航
通过 Google Play 商店中的 Droppers 感染了 300.000+安卓设备
“瞒天过海”计出自《三十六计》第一章，是中国著名的政治、战争和民生战术和技巧集锦。它转化为“隐藏在显眼的地方”或“掩盖你的真实目标”。
Android 银行木马程序已将这一策略牢记在心，多年来一直非常适应为限制其运营而引入的新 Google Play 应用商店限制。这些限制包括对某些（危险的）应用程序权限的使用设置限制，这些权限在分发或自动化恶意软件策略方面发挥着重要作用。
在本博客中，我们将讨论最近用于通过 Google Play ( MITRE T1475 )传播 Android 银行木马的技术，导致目标银行遭受重大财务损失。我们还将讨论银行木马收集联系人和击键的副产品，有时会被遗忘，从而导致严重的数据泄露。
威胁行为者使用的策略
从自动化（沙盒）和机器学习的角度来看，这些 Google Play 分发活动很难被检测到的原因是，dropper 应用程序都具有非常小的恶意足迹。如此小的占用空间是 Google Play 强制执行的权限限制的（直接）结果。
一个很好的例子是Google于2021年11 月 13 日引入的修改，该修改限制了无障碍服务的使用，早期的 dropper 活动滥用该服务在未经用户同意的情况下自动化和安装应用程序。
谷歌的这种监管迫使参与者寻找方法来显着减少 dropper 应用程序的占用空间。除了改进恶意软件代码工作外，Google Play 分发活动也比以前的活动更加精细。例如，通过在 Google Play 中引入经过长时间精心策划的小型恶意代码更新，以及使用 dropper C2 后端以完全匹配 dropper 应用程序的主题（例如，用于锻炼重点应用程序的有效健身网站）。
为了让自己更难被发现，这些植入程序背后的参与者只会手动激活在受感染设备上安装银行木马，以防他们希望在世界特定地区有更多受害者。这使得自动检测成为任何组织都难以采用的策略。
VirusTotal 没有展示防病毒产品检测随时间的演变，但几乎所有活动在某个时间点的 VirusTotal 上都有或有 0/62 的 FUD 分数，这证实了检测占用空间最小的 dropper 应用程序的难度。
家庭和统计
在下面的段落中，我们概述了最近通过 Google Play 分发的每个系列的作案手法 (MO)。这些系列中的每一个都有自己的银行应用程序目标列表，可以在附录中找到。
Anatsa 运动
在专门针对不同恶意软件系列的分发技术进行的研究中，我们的分析师在 Google Play 中发现了许多专门用于分发银行木马 Anatsa 的植入程序。Anatsa 于 2021 年 1 月被 ThreatFabric 发现。
Anatsa 是一种相当先进的 Android 银行木马，具有 RAT 和半 ATS 功能。它还可以执行经典的覆盖攻击以窃取凭据、可访问性日志记录（捕获用户屏幕上显示的所有内容）和键盘记录。此前，ThreatFabric 曾报道过Anatsa 与 Cabassous 并排分布在整个欧洲的诈骗活动的案例。我们的最新发现表明 Anatsa 现在使用 Google Play dropper 应用程序。
数以千计的受害者
我们在 2021 年 6 月发现了第一个伪装成扫描文档的应用程序的 dropper。总的来说，ThreatFabric 分析师能够识别出自 2021 年 6 月以来在 Google Play 上发布的 6 个 Anatsa dropper。
这些应用程序伪装成二维码扫描仪、PDF 扫描仪和加密货币应用程序。一个 dropper 应用程序的安装次数超过50.000次，所有 dropper 的总安装量超过100.000 次。
感染 Anatsa 的过程如下所示：从 Google Play 开始安装后，用户被迫更新应用程序以继续使用该应用程序。此时，Anatsa 有效载荷从 C2 服务器下载，并安装在毫无戒心的受害者的设备上。
它背后的参与者负责让他们的应用程序看起来合法和有用。这些应用程序有大量正面评价。安装数量和评论的存在可能会说服 Android 用户安装该应用程序。此外，这些应用程序确实具有声称的功能，安装后它们确实可以正常运行并进一步说服受害者其合法性。
尽管安装数量巨大，但并非所有安装了这些投放器的设备都会收到 Anatsa，因为参与者努力只针对他们感兴趣的区域。我们将在下一节中介绍这个和其他技术细节。
技术细节
所有 Anatsa Droppers在代码方面看起来都很相似。应用程序启动后，会启动一项服务以检查是否安装了“更新”。dropper 向 C2 发出请求，发送有关设备的信息，包括设备 ID、设备名称、区域设置、国家/地区、Android SDK 版本。
如前所述，并非每个设备都会收到“更新”。此时，C2 后端根据设备信息决定是否提供 Anatsa Payload。根据 C2 的响应，dropper 将决定是否下载 Anatsa。
这种方法允许参与者瞄准特定区域的设备，并轻松地将注意力转移到另一个区域。这种行为与 Anatsa 从一个地区转移到另一个地区，不断更新其目标金融机构名单是一致的。此外，在 Google Play 上发布应用程序时，过滤允许网络犯罪分子在评估过程中阻止下载器下载“更新”。
我们的分析师已经确定 Anatsa 投放器最初（在其在 Google Play 上发布的第一个版本中）没有恶意功能，但在以后的版本中修改了它们的行为，添加了投放功能，并需要更广泛的权限集。
当满足所有条件并且payloads准备就绪时，将提示用户下载并安装它。
成功下载“更新”后，将要求用户授予安装未知来源应用程序的权限。用户之前确信更新是应用程序正常运行所必需的，因此授予权限。安装完成后，Anatsa 在设备上运行，并立即要求受害者授予 Accessibility Service 权限。
启用无障碍服务后，Anatsa 可以完全控制设备并可以代表受害者执行操作。同时，dropper 应用程序也作为合法应用程序运行和运行，受害者可能会毫无戒心。
Hydra 和 Ermac 运动
ThreatFabric 识别出多个由 Brunhilda 威胁参与者组织投放的恶意软件实例，与之前的活动一致，它由木马应用程序组成。观察到 Brunhilda 丢弃了不同的恶意软件系列。
在第一个案例中，我们观察到 Brunhilda 冒充 QR 码创建者应用程序，Brunhilda 丢弃了来自成熟家族（如Hydra）和新家族（如Ermac）的样本。
此次 Brunhilda 活动删除的应用程序与我们在 2021 年观察到的先前版本在功能上没有太大区别。与之前的迭代一样，Brunhilda 使用 gRPC 协议向其 C2 发送注册请求。成功注册后，并在传达有关设备的更多详细信息后，C2 会指示投放器下载并安装有payloads包。
在过去的几个月里，这两个家族都非常活跃，甚至冒险进入了以前未开发的市场，比如美国。这波新的恶意软件浪潮始于 2021 年 8 月，还包括 Gustuff 和 Anatsa 等其他系列。
外星人战役
如前所述，ThreatFabric 观察到 Brunhilda 为不同的恶意软件系列提供服务。观察到一些样本的安装次数超过 50.000 次，并丢弃了 android 木马Alien。
同样在这种情况下，就像部署Vultur 一样，这些 aps 在从商店下架之前达到了数千次下载。这些样本在他们的操作中非常成功，样本范围从 5.000 次以上的下载到令人印象深刻的50.000 次以上的下载量。考虑到这些数字，可以说这个Droppers家族在其运作过程中可能感染了数十万受害者。
Gymdrop：你不想去的健身房
2021 年 11 月，ThreatFabric 分析师在 Google Play 中发现了另一个 dropper。它有10.000 多个安装和伪装作为自我训练的应用程序。
我们称之为“Gymdrop”的这个 dropper 是网络犯罪分子如何试图说服受害者和检测系统他们的应用程序是合法的的另一个例子。该应用程序网站的设计初看起来是合法的。然而，它只是一个健身房网站的模板，上面没有任何有用的信息，甚至在其页面中仍然包含“Lorem Ipsum”占位符文本。
开发者网站还充当 Gymdrop 的 C2。就像之前观察到的那样，这个植入程序试图说服受害者安装虚假更新。然而，在这种情况下，它以一种更具创造性的方式完成：有效载荷被视为符合应用程序的新的锻炼练习包。用户单击“确定”后，dropper 将请求所需的权限。
在 dropper 从 C2 获取其配置后不久。配置文件包含下载有效负载的链接。此外，配置包含基于设备模型的过滤规则。根据过滤掉的模型和 dropper 的代码，我们可以得出结论，这样做是为了避免在模拟器或研究环境中下载有效负载。
如果满足所有条件，则将下载并安装有效负载。这个 dropper 也不请求可访问性服务权限，它只是请求安装包的权限，并承诺安装新的锻炼练习 – 诱使用户授予此权限。安装后，将启动有效负载。我们的威胁情报显示，目前此投放程序用于分发 Alien 银行木马。
在撰写此博文时，Gymdrop 已更新（新版本已上传到 Google Play）。但是在C2上没有找到配置文件。在 Google Play 上发布更新之前，可能可以不提供有效负载以通过 Google 执行的安全检查。
2 个 dropper 应用程序以促进僵尸网络的构建
值得一提的是，该活动的 Alien 样本与之前描述的由 Brunhilda Droppers提供支持的活动的样本连接到相同的 C2。
这使我们得出结论，这些 Alien 活动背后的参与者在其分发策略中至少使用了 2 种不同的 dropper 服务。
结论
在短短4个月的时间里，4 个大型 Android 家族通过 Google Play传播，通过多个Droppers应用程序感染了300.000多个病毒。
新 dropper 活动的一个显着趋势是，攻击者专注于在 Google Play 中减少恶意足迹的加载程序，这大大增加了使用自动化和机器学习技术检测它们的难度。
小的恶意足迹是新的 Google Play 限制（当前和计划中的）的结果，该限制对有关应用程序权限的隐私的使用进行了限制。诸如无障碍服务之类的权限，在之前的活动中，这是通过 Google Play 中的Droppers应用程序自动执行 Android 银行木马程序安装过程的核心策略之一。
通过限制这些权限的使用，参与者被迫选择更传统的安装应用程序的方式，即通过询问安装权限，其副作用是与合法应用程序混合更多。这是移动银行威胁行为者潜入谷歌可信应用商店取得重大成功的核心原因之一。
他们成功的第二个重要因素是参与者设置了限制，并通过机制确保有效载荷仅安装在受害者的设备上，而不是安装在测试环境中。为了实现这一目标，犯罪分子使用了多种技术，从位置检查到增量恶意更新，通过基于时间的去混淆和服务器端仿真检查。
这种致力于逃避不必要的关注的令人难以置信的关注使自动恶意软件检测变得不那么可靠。我们在本博文中调查的 9 个 dropper 的 VirusTotal 总体得分非常低(被杀毒软件检测出来的概率)，这证实了这一考虑。
我们如何帮助客户
ThreatFabric 使运行安全的移动支付业务变得前所未有的简单。借助最先进的移动银行威胁情报，金融机构可以构建基于风险的移动安全策略，并利用这种独特的知识实时检测客户移动设备上的恶意软件欺诈。
我们正在与我们的客户和合作伙伴一起构建一个易于访问的信息系统，以应对针对金融部门的移动恶意软件日益增长的威胁。我们特别要感谢网络防御联盟 (CDA) 在整个金融部门合作并主动共享知识和信息以对抗网络威胁。
ThreatFabric 与世界各地的 TIP 建立了合作伙伴关系。
如果您想申请免费试用我们的 MTI-feed，或想测试我们自己的 MTI 门户 30 天，请随时通过以下方式与我们联系：[email protected]
如果您想了解更多关于我们如何检测移动设备上的移动恶意软件的信息，您可以通过以下方式直接联系我们：[email protected]
附录: IOC(侵害指标)
Brunhilda Dropper样本文件
| App名称 | 包名称 | SHA-256 |
|---|---|---|
| Two Factor Authenticator | com.flowdivison | a3bd136f14cc38d6647020b2632bc35f21fc643c0d3741caaf92f48df0fc6997 |
| Protection Guard | com.protectionguard.app | d3dc4e22611ed20d700b6dd292ffddbc595c42453f18879f2ae4693a4d4d925a |
| QR CreatorScanner | com.ready.qrscanner.mix | ed537f8686824595cb3ae45f0e659437b3ae96c0a04203482d80a3e51dd915ab |
| Master Scanner Live | com.multifuction.combine.qr | 7aa60296b771bdf6f2b52ad62ffd2176dc66cb38b4e6d2b658496a6754650ad4 |
Brunhilda Dropper C2网址
| URL |
|---|
| hxxps://protectionguardapp[.]club |
| hxxps://readyqrscanner[.]club |
| hxxps://flowdivison[.]club |
| hxxps://multifuctionscanner[.]club |
Anatsa Dropper 样本
| App名称 | 包名称 | SHA-256 |
|---|---|---|
| QR Scanner 2021 | com.qr.code.generate | 2db34aa26b1ca5b3619a0cf26d166ae9e85a98babf1bc41f784389ccc6f54afb |
| QR Scanner | com.qr.barqr.scangen | d4e9a95719e4b4748dba1338fdc5e4c7622b029bbcd9aac8a1caec30b5508db4 |
| PDF Document Scanner – Scan to PDF | com.xaviermuches.docscannerpro2 | 2080061fe7f219fa0ed6e4c765a12a5bc2075d18482fa8cf27f7a090deca54c5 |
| PDF Document Scanner | com.docscanverifier.mobile | 974eb933d687a9dd3539b97821a6a777a8e5b4d65e1f32092d5ae30991d4b544 |
| PDF Document Scanner Free | com.doscanner.mobile | 16c3123574523a3f1fb24bbe6748e957afff21bef0e05cdb3b3e601a753b8f9d |
| CryptoTracker | cryptolistapp.app.com.cryptotracker | 1aafe8407e52dc4a27ea800577d0eae3d389cb61af54e0d69b89639115d5273c |
Anatsa Dropper C2网址
| URL |
|---|
| hxxp://195.201.70.88/api/update |
| hxxp://178.63.27.179/api/update |
| hxxp://91.242.229.85/api/update |
| hxxp://195.201.70.89/api/update |
Gymdrop Dropper样本
| App name | Package name | SHA-256 |
|---|---|---|
| Gym and Fitness Trainer | com.gym.trainer.jeux | 30ee6f4ea71958c2b8d3c98a73408979f8179159acccc01b6fd53ccb20579b6b |
| Gym and Fitness Trainer | com.gym.trainer.jeux | b3c408eafe73cad0bb989135169a8314aae656357501683678eff9be9bcc618f |
Gymdrop Dropper C2网址
| URL |
|---|
| hxxps://onlinefitnessanalysis[.]com/ |
dropped病毒样本
| 病毒家族 | App名称 | 包名称 | SHA-256 |
|---|---|---|---|
| Alien.A | Master Scanner Live | leaf.leave.exchang | 74407e40e1c01e73087442bcdf3a0802121c4263ab67122674d9d09b3edf856e |
| Alien.A | Gym and Fitness Trainer | gesture.enlist.say | e8cbcc34af3bd352767b7a9270dd684a50da2e68976a3712675526a7398550a0 |
| Anatsa.A | PDF AI : TEXT RECOGNIZER | com.uykxx.noazg | d42e0d3db3662e809af3198da67fdbd46d5c2a1052b5945401e4cdd06c197714 |
| Hydra.C | QR CreatorScanner | com.cinnamon.equal | 9ab66c1b7db44abaa53850a3d6a9af36c8ad603dab6900caba592497f632349f |
| Ermac.A | QR CreatorScanner | com.tag.right | fd7e7e23db5f645db9ed47a5d36e7cf57ca2dbdf46a37484eafa1e04f657bf02 |
附录: 有针对性的应用
Alien.A 目标
| 包名称 | App名称 |
|---|---|
| com.kubi.kucoin | KuCoin: Bitcoin Exchange & Crypto Wallet |
| com.abanca.bm.pt | ABANCA – Portugal |
| com.bitfinex.mobileapp | Bitfinex |
| com.changelly.app | Changelly: Buy Bitcoin BTC & Fast Crypto Exchange |
| es.liberbank.cajasturapp | Banca Digital Liberbank |
| wit.android.bcpBankingApp.millennium | Millenniumbcp |
| es.openbank.mobile | Openbank – banca móvil |
| pt.bctt.appbctt | Banco CTT |
| com.exictos.mbanka.bic | Banco BIC, SA |
| com.kraken.trade | Pro: Advanced Bitcoin & Crypto Trading |
| com.plunien.poloniex | Poloniex Crypto Exchange |
| com.kutxabank.android | Kutxabank |
| com.bitpay.wallet | BitPay – Secure Bitcoin Wallet |
| com.binance.dev | Binance – Buy & Sell Bitcoin Securely |
| com.bbva.netcash | BBVA Net Cash ES & PT |
| com.coinbase.android | Coinbase – Buy & Sell Bitcoin. Crypto Wallet |
| com.rsi.Colonya | Colonya Caixa Pollença |
| com.transferwise.android | TransferWise Money Transfer |
| pt.bancobpi.mobile.fiabilizacao | BPI APP |
| com.bancamarch.bancamovil | Banca March |
| com.mycelium.wallet | Mycelium Bitcoin Wallet |
| com.cajasur.android | Cajasur |
| com.tecnocom.cajalaboral | Banca Móvil Laboral Kutxa |
| net.bitbay.bitcoin | Bitcoin & Crypto Exchange – BitBay |
| es.evobanco.bancamovil | EVO Banco móvil |
| com.bankinter.portugal.bmb | Bankinter Portugal |
| com.google.android.gm | Gmail |
| pt.bancobest.android.mobilebanking | Best Bank |
| com.wavesplatform.wallet | Waves.Exchange |
| net.bitstamp.app | Bitstamp – Buy & Sell Bitcoin at Crypto Exchange |
| es.bancosantander.apps | Santander |
| com.microsoft.office.outlook | Microsoft Outlook: Organize Your Email & Calendar |
| com.okinc.okex.gp | OKEx – Bitcoin/Crypto Trading Platform |
| com.grupocajamar.wefferent | Grupo Cajamar |
| com.bankinter.launcher | Bankinter Móvil |
| es.cm.android | Bankia |
| pt.novobanco.nbapp | NB smart app |
| com.cajaingenieros.android.bancamovil | Caja de Ingenieros Banca MÓVIL |
| es.ibercaja.ibercajaapp | Ibercaja |
| pt.santandertotta.mobileempresas | Santander Empresas |
| es.pibank.customers | Pibank |
| piuk.blockchain.android | Blockchain Wallet. Bitcoin, Bitcoin Cash, Ethereum |
| com.indra.itecban.mobile.novobanco | NBapp Spain |
| com.mediolanum | Banco Mediolanum España |
| com.android.vending | Google Play |
| com.bbva.mobile.pt | BBVA Portugal |
| com.squareup.cash | Cash App |
| es.caixagalicia.activamovil | ABANCA- Banca Móvil |
| es.univia.unicajamovil | UnicajaMovil |
| org.electrum.electrum | Electrum Bitcoin Wallet |
| app.wizink.es | WiZink, tu banco senZillo |
| com.yahoo.mobile.client.android.mail | Yahoo Mail – Organized Email |
| cgd.pt.caixadirectaparticulares | Caixadirecta |
| com.connectivityapps.hotmail | Connect for Hotmail & Outlook: Mail and Calendar |
| com.mail.mobile.android.mail | mail.com mail |
| com.imaginbank.app | imaginBank – Your mobile bank |
| es.caixaontinyent.caixaontinyentapp | Caixa Ontinyent |
| www.ingdirect.nativeframe | ING España. Banca Móvil |
| eu.atlantico.bancoatlanticoapp | MY ATLANTICO |
| com.bbva.bbvacontigo | BBVA Spain |
| com.citi.mobile.ccc | CitiManager – Corporate Cards |
| ca.mobile.explorer | CA Mobile |
| com.paypal.android.p2pmobile | PayPal Mobile Cash: Send and Request Money Fast |
| com.rsi | ruralvía |
| es.cecabank.ealia2103appstore | UniPay Unicaja |
| wit.android.bcpBankingApp.activoBank | ActivoBank |
| com.indra.itecban.triodosbank.mobile.banki | – |
| es.lacaixa.mobile.android.newwapicon | CaixaBank |
| com.db.pbc.mibanco | Mi Banco db |
| com.targoes_prod.bad | TARGOBANK – Banca a distancia |
Ermac.A Targets
| 包名称 | App名称 |
|---|---|
| eu.inmite.prj.kb.mobilbank | Mobilni Banka |
| com.greater.Greater | Greater Bank |
| uk.co.tsb.newmobilebank | TSB Mobile Banking |
| org.microemu.android.model.common.VTUserApplicationLINKMB | Link Celular |
| es.lacaixa.mobile.android.newwapicon | CaixaBank |
| com.IngDirectAndroid | ING France |
| es.bancosantander.apps | Santander |
| com.ocito.cdn.activity.creditdunord | Crédit du Nord pour Mobile |
| pl.ideabank.mobilebanking | Idea Bank PL |
| gt.com.bi.bienlinea | Bi en Línea |
| org.banking.bsa.businessconnect | BankSA Business App |
| pl.envelobank.aplikacja | EnveloBank |
| net.inverline.bancosabadell.officelocator.android | Banco Sabadell App. Your mobile bank |
| com.msf.kbank.mobile | Kotak – 811 & Mobile Banking |
| au.com.ingdirect.android | ING Australia Banking |
| com.getingroup.mobilebanking | Getin Mobile |
| au.com.amp.myportfolio.android | My AMP |
| com.magiclick.odeabank | Odeabank |
| com.mtel.androidbea | BEA 東亞銀行 |
| eu.eleader.mobilebanking.pekao.firm | PekaoBiznes24 |
| org.banking.stg.businessconnect | St.George Business App |
| softax.pekao.powerpay | PeoPay |
| com.rsi | ruralvía |
| my.com.hsbc.hsbcmalaysia | HSBC Malaysia |
| com.td | TD Canada |
| org.banksa.bank | BankSA Mobile Banking |
| org.bom.bank | Bank of Melbourne Mobile Banking |
| com.zoluxiones.officebanking | Banco Santander Perú S.A. |
| com.pcfinancial.mobile | Simplii Financial |
| es.evobanco.bancamovil | EVO Banco móvil |
| com.latuabancaperandroid | Intesa Sanpaolo Mobile |
| com.fusion.beyondbank | Beyond Bank Australia |
| com.rbs.mobile.android.rbs | Royal Bank of Scotland Mobile Banking |
| com.unicredit | Mobile Banking UniCredit |
| com.tarjetanaranja.emisor.serviciosClientes.appTitulares | Naranja |
| au.com.newcastlepermanent | NPBS Mobile Banking |
| au.com.suncorp.SuncorpBank | Suncorp Bank |
| de.traktorpool | tractorpool |
| hu.cardinal.erste.mobilapp | Erste Business MobilBank |
| au.com.bankwest.mobile | Bankwest |
| it.popso.SCRIGNOapp | SCRIGNOapp |
| de.dkb.portalapp | DKB-Banking |
| pe.com.interbank.mobilebanking | Interbank APP |
| it.copergmps.rt.pf.android.sp.bmps | Banca MPS |
| de.consorsbank | Consorsbank |
| com.isis_papyrus.raiffeisen_pay_eyewdg | Raiffeisen ELBA |
| de.fiducia.smartphone.android.banking.vr | VR Banking Classic |
| com.pozitron.iscep | İşCep – Mobile Banking |
| wit.android.bcpBankingApp.millenniumPL | Bank Millennium |
| es.ibercaja.ibercajaapp | Ibercaja |
| alior.bankingapp.android | Usługi Bankowe |
| com.krungsri.kma | KMA |
| it.ingdirect.app | ING Italia |
| com.mobillium.papara | Papara |
| de.adesso_mobile.secureapp.netbank | SecureApp netbank |
| com.nearform.ptsb | permanent tsb |
| com.konylabs.cbplpat | Citi Handlowy |
| com.lynxspa.bancopopolare | YouApp |
| tr.com.sekerbilisim.mbank | ŞEKER MOBİL ŞUBE |
| com.appfactory.tmb | Teachers Mutual Bank |
| au.com.mebank.banking | ME Bank |
| com.kasikorn.retail.mbanking.wap | K PLUS |
| com.infrasofttech.MahaBank | Maha Mobile |
| com.pttfinans | PTTBank |
| es.univia.unicajamovil | UnicajaMovil |
| au.com.commbank.commbiz.prod | CommBiz |
| my.com.maybank2u.m2umobile | Maybank2u MY |
| es.pibank.customers | Pibank |
| de.ingdiba.bankingapp | ING Banking to go |
| com.fusion.banking | Bank Australia app |
| com.tecnocom.cajalaboral | Banca Móvil Laboral Kutxa |
| pegasus.project.ebh.mobile.android.bundle.mobilebank | George Magyarország |
| au.com.rams.RAMS | myRAMS |
| com.teb | CEPTETEB |
| eu.netinfo.colpatria.system | Scotiabank Colpatria |
| de.santander.presentation | Santander Banking |
| es.openbank.mobile | Openbank – banca móvil |
| pl.raiffeisen.nfc | Mobilny Portfel |
| pt.novobanco.nbapp | NB smart app |
| uk.co.metrobankonline.mobile.android.production | Metro Bank |
| com.tmobtech.halkbank | Halkbank Mobil |
| de.mobile.android.app | mobile.de – Germany‘s largest car market |
| net.bnpparibas.mescomptes | Mes Comptes BNP Paribas |
| com.mercadolibre | Mercado Libre: compra fácil y rápido |
| uk.co.mbna.cardservices.android | MBNA – Card Services App |
| hu.cardinal.cib.mobilapp | CIB Business Online |
| fr.creditagricole.androidapp | Ma Banque |
| jp.co.rakuten_bank.rakutenbank | 楽天銀行 -個人のお客様向けアプリ |
| org.banking.bom.businessconnect | Bank of Melbourne Business App |
| pl.ing.mojeing | Moje ING mobile |
| pl.pkobp.ipkobiznes | iPKO biznes |
| com.usbank.mobilebanking | U.S. Bank – Inspired by customers |
| pl.pkobp.iko | IKO |
| com.anz.transactive.global | ANZ Transactive – Global |
| com.bankofqueensland.boq | BOQ Mobile |
| com.ingbanktr.ingmobil | ING Mobil |
| com.tdbank | TD Bank (US) |
| com.scb.phone | SCB EASY |
| com.Version1 | PNB ONE |
| net.garagecoders.e_llavescotiainfo | ScotiaMóvil |
| nz.co.asb.asbmobile | ASB Mobile Banking |
| com.finanteq.finance.bgz | BNP Paribas GOMobile |
| com.woodforest | Woodforest Mobile Banking |
| ro.btrl.mobile | Banca Transilvania |
| uk.co.hsbc.hsbcukmobilebanking | HSBC UK Mobile Banking |
| com.todo1.mobile | Bancolombia App Personas |
| com.uy.itau.appitauuypf | Itaú Uruguay |
| com.key.android | KeyBank Mobile |
| it.bnl.apps.banking | BNL |
| au.com.cua.mb | CUA Mobile Banking |
| com.ykb.android | Yapı Kredi Mobile |
| ktbcs.netbank | Krungthai NEXT |
| com.santander.bpi | Santander Private Banking |
| posteitaliane.posteapp.apppostepay | Postepay |
| uk.co.tescomobile.android | Tesco Mobile |
| es.ceca.cajalnet | Cajalnet |
| com.scotiabank.banking | Scotiabank Mobile Banking |
| it.nogood.container | UBI Banca |
| pl.noblebank.mobile | Noble Mobile |
| com.suntrust.mobilebanking | SunTrust Mobile App |
| pl.eurobank2 | eurobank mobile 2.0 |
| com.mobileloft.alpha.droid | myAlpha Mobile |
| com.unionbank.ecommerce.mobile.android | Union Bank Mobile Banking |
| pl.millennium.corpApp | Bank Millennium for Companies |
| au.com.hsbc.hsbcaustralia | HSBC Australia |
| com.starfinanz.smob.android.sfinanzstatus | Sparkasse Ihre mobile Filiale |
| org.westpac.col | Westpac Corporate Mobile |
| au.com.macquarie.banking | Macquarie Mobile Banking |
| finansbank.enpara | Enpara.com Cep Şubesi |
| org.stgeorge.bank | St.George Mobile Banking |
| com.mcom.firstcitizens | First Citizens Mobile Banking |
| fr.laposte.lapostemobile | La Poste – Services Postaux |
| es.bancosantander.empresas | Santander Empresas |
| fr.lcl.android.customerarea | Mes Comptes – LCL |
| fr.banquepopulaire.cyberplus | Banque Populaire |
| uk.co.santander.santanderUK | Santander Mobile Banking |
| com.comarch.mobile.banking.bgzbnpparibas.biznes | Mobile BiznesPl@net |
| pl.fakturownia | Fakturownia.pl |
| pt.bancobpi.mobile.fiabilizacao | BPI APP |
| de.commerzbanking.mobil | Commerzbank Banking – The app at your side |
| de.comdirect.android | comdirect mobile App |
| com.kutxabank.android | Kutxabank |
| pt.santandertotta.mobileparticulares | Santander Particulares |
| es.caixageral.caixageralapp | Banco Caixa Geral España |
| com.itau.empresas | Itaú Empresas: Controle e Gestão do seu Negócio |
| wit.android.bcpBankingApp.millennium | Millenniumbcp |
| com.sbi.SBIFreedomPlus | Yono Lite SBI – Mobile Banking |
| fr.oney.mobile.mescomptes | Oney France |
| pl.bzwbk.bzwbk24 | Santander mobile |
| com.vancity.mobileapp | Vancity |
| com.comarch.security.mobilebanking | ING Business |
| com.snapwork.hdfc | HDFC Bank MobileBanking |
| es.caixagalicia.activamovil | ABANCA- Banca Móvil |
| tsb.mobilebanking | TSB Bank Mobile Banking |
| com.zellepay.zelle | Zelle |
| ma.gbp.pocketbank | Pocket Bank |
| de.postbank.finanzassistent | Postbank Finanzassistent |
| com.bendigobank.mobile | Bendigo Bank |
| es.liberbank.cajasturapp | Banca Digital Liberbank |
| hu.bb.mobilapp | Budapest Bank Mobil App |
| com.pnc.ecommerce.mobile | PNC Mobile |
| eu.atlantico.bancoatlanticoapp | MY ATLANTICO |
| pl.bps.bankowoscmobilna | BPS Mobilnie |
| eu.unicreditgroup.hvbapptan | HVB Mobile Banking |
| com.konylabs.HongLeongConnect | Hong Leong Connect Mobile Banking |
| pl.aliorbank.aib | Alior Mobile |
| com.mfoundry.mb.android.mb_136 | People’s United Bank Mobile |
| au.com.ubank.internetbanking | UBank Mobile Banking |
| de.number26.android | N26 — The Mobile Bank |
| cz.csob.smartbanking | ČSOB Smartbanking |
| mobi.societegenerale.mobile.lappli | L’Appli Société Générale |
| com.vakifbank.mobile | VakıfBank Mobil Bankacılık |
| com.anz.android.gomoney | ANZ Australia |
| mbanking.NBG | NBG Mobile Banking |
| pl.bph | BusinessPro Lite |
| com.finanteq.finance.ca | CA24 Mobile |
| com.quoine.quoinex.light | Liquid by Quoineライト版（リキッドバイコイン） -ビットコインなどの仮想通貨取引所 |
| enterprise.com.anz.shield | ANZ Shield |
| pl.bzwbk.ibiznes24 | iBiznes24 mobile |
| tr.com.hsbc.hsbcturkey | HSBC Turkey |
| com.kuveytturk.mobil | Kuveyt Türk |
| com.ziraat.ziraatmobil | Ziraat Mobile |
| com.targo_prod.bad | TARGOBANK Mobile Banking |
| au.com.nab.mobile | NAB Mobile Banking |
| com.samba.mb | SambaMobile |
| org.westpac.bank | Westpac Mobile Banking |
| pl.ifirma.ifirmafaktury | IFIRMA – Darmowy Program do Faktur |
| com.rbc.mobile.android | RBC Mobile |
| com.tideplatform.banking | Tide – Smart Mobile Banking |
| com.sbi.SBAnywhereCorporate | SBI Anywhere Corporate |
| hu.mkb.mobilapp | MKB Mobilalkalmazás |
| com.todo1.davivienda.mobileapp | Davivienda Móvil |
| jp.co.netbk | 住信SBIネット銀行 |
| com.navyfederal.android | Navy Federal Credit Union |
| com.infrasofttech.CentralBank | Cent Mobile |
| com.konylabs.capitalone | Capital One® Mobile |
| es.cm.android | Bankia |
| pl.mbank | mBank PL |
| com.wf.wellsfargomobile | Wells Fargo Mobile |
| gr.winbank.mobilenext | Winbank Mobile |
| com.westernunion.moneytransferr3app.es | Western Union ES – Send Money Transfers Quickly |
| com.snapwork.IDBI | IDBI Bank GO Mobile+ |
| com.commbank.netbank | CommBank |
| mx.bancosantander.supermovil | Santander móvil |
| com.rbs.mobile.android.natwest | NatWest Mobile Banking |
| it.carige | Carige Mobile |
| com.usaa.mobile.android.usaa | USAA Mobile |
| eu.eleader.mobilebanking.pekao | Pekao24Makler |
Anatsa.A Targets
| 包名称 | App名称 |
|---|---|
| uk.co.hsbc.hsbcukmobilebanking | HSBC UK Mobile Banking |
| com.chase.sig.android | Chase Mobile |
| com.wf.wellsfargomobile | Wells Fargo Mobile |
| com.citi.citimobile | Citi Mobile® |
| com.konylabs.capitalone | Capital One® Mobile |
| com.infonow.bofa | Bank of America Mobile Banking |
| com.jpm.sig.android | J.P. Morgan Mobile |
| com.usbank.mobilebanking | U.S. Bank – Inspired by customers |
| com.truist.mobile | Truist Mobile – Banking Made Better |
| com.pnc.ecommerce.mobile | PNC Mobile |
| com.tdbank | TD Bank (US) |
| com.schwab.mobile | Schwab Mobile |
| com.statestreetbank.grip | State Street Bank |
| us.hsbc.hsbcus | HSBC US |
| com.citizensbank.androidapp | Citizens Bank Mobile Banking |
| com.syf.synchronybank | Synchrony Bank |
| com.creditonebank.mobile | Credit One Bank Mobile |
| com.monitise.client.android.clydesdale | Clydesdale Bank Mobile Banking |
| com.fidelity.android | Fidelity Investments |
| us.current.android | Earn Cash Reward: Make Money Playing Games & Music |
| com.robinhood.android | Robinhood – Investment & Trading, Commission-free |
| com.moneylion | MoneyLion: Mobile Banking App |
| com.sablemoney.sableapp.prod | Sable |
| com.virginmoney.uk.mobile.android | Virgin Money Mobile Banking |
| com.monitise.client.android.yorkshire | Yorkshire Bank Mobile Banking |
| com.monitise.client.android.clydesdale | Clydesdale Bank Mobile Banking |
| com.algorand.android | Algorand Wallet |
| com.coinbase.android | Coinbase – Buy & Sell Bitcoin. Crypto Wallet |
| co.mona.android | Crypto.com – Buy Bitcoin Now |
| com.monese.monese.live | Monese – Mobile Money Account for UK & Europe |
| com.binance.dev | Binance – Buy & Sell Bitcoin Securely |
| com.danskebank.mobilebank3.uk | Mobile Bank UK – Danske Bank |
| com.rbs.mobile.android.ubn | Ulster Bank NI Mobile Banking |
| com.rbs.mobile.android.natwest | NatWest Mobile Banking |
| com.rbs.mobile.android.natwestoffshore | NatWest International |
| com.plunien.poloniex | Poloniex Crypto Exchange |
| com.wallet.crypto.trustapp | Trust: Crypto & Bitcoin Wallet |
| com.cooperativebank.bank | The Co-operative Bank |
| uk.co.metrobankonline.mobile.android.production | Metro Bank |
| com.starlingbank.android | Starling Bank – Better Mobile Banking |
| io.metamask | MetaMask – Buy, Send and Swap Crypto |
| co.uk.getmondo | Monzo Bank |
| com.binance.us | Binance.US |
| com.kraken.invest.app | Kraken – Buy Bitcoin & Crypto |
| com.blockfolio.blockfolio | Blockfolio – Bitcoin and Cryptocurrency Tracker |
| com.gemini.android.app | Gemini: Buy Bitcoin Instantly |
| com.okinc.okcoin.intl | Okcoin – Buy & Trade Bitcoin, Ethereum, & Crypto |
| com.barclays.android.barclaysmobilebanking | Barclays |
| com.tideplatform.banking | Tide – Smart Mobile Banking |
| com.grppl.android.shell.halifax | Halifax: the banking app that gives you extra |
| com.grppl.android.shell.CMBlloydsTSB73 | Lloyds Bank Mobile Banking: by your side |
| com.usaa.mobile.android.usaa | USAA Mobile |
| com.blockfi.mobile | BlockFi – Buy, Earn, Borrow Crypto |
| com.marcus.android | Marcus by Goldman Sachs® |
| com.unionbank.ecommerce.mobile.android | Union Bank Mobile Banking |
| org.penfed.mobile.banking | PenFed |
| com.navyfederal.android | Navy Federal Credit Union |
| com.stash.stashinvest | Stash: Invest, Bank, Save |
| com.regions.mobbanking | Regions Bank |
| com.varomoney.bank | Varo Bank: Mobile Banking |
| com.current.app | Current – Modern Banking |
| com.huntington.m | Huntington Mobile |
| com.clairmail.fth | Fifth Third Mobile Banking |
| com.mint | Mint: Personal Finance Manager |
| piuk.blockchain.android | Blockchain Wallet. Bitcoin, Bitcoin Cash, Ethereum |
| com.q2e.texasdowcreditunion5004401st.mobile.production | TDECU Digital Banking |
| pr.com.firstbank | FirstBank Digital Banking App |
| com.oneazcu.banking | OneAZ Mobile Banking |
| com.axos.udb | Axos Bank® |
| com.etrade.mobilepro.activity | E*TRADE: Invest. Trade. Save. |
| org.suncoast.mobile | Suncoast SunMobile |
| com.firsttech.firsttech | First Tech Federal CU |
| org.ncsecu.mobile | SECU |
| org.ncsecu.mobile | SECU |
| com.softek.ofxclmobile.warrenfcu | Blue FCU Mobile Banking App |
| com.bethpage.bethpage | Bethpage Mobile Banking |
| com.myoccu.mobile | MyOCCU Mobile Banking |
| com.ifs.banking.fiid3160 | Tru2Go Truliant Mobile Banking |
| com.desertschools.mobilebanking | Desert Financial Mobile |
| com.nymfcu.nymfcu | NYMCU Mobile Banking |
| com.softek.ofxclmobile.summitcu | Summit Credit Union Mobile |
| com.fi7453.godough | PFFCU Mobile Banking |
| com.cuamerica.cuamerica | Credit Union of America |
| com.ifs.banking.fiid3337 | Arizona Federal Mobile Banking |
| com.ksfcu.ksfcu | Valley Strong DataMobile |
| com.ifs.mobilebanking.fiid9094 | Service CU Mobile Banking |
| com.scottcreditunion5029.mobile | Scott Credit Union |
| com.socalcu.socalcu | CU SoCal Mobile Banking |
| com.q2e.unitedfcu5017android.ufcu.uwnmobile | United Federal Credit Union |
| com.credituniononecu.credituniononecu | NEW – Credit Union One Michigan |
| mobile.dcfcu.org | DCFCU Mobile |
| com.ifs.mobilebanking.fiid3919 | Associated Credit Union Mobile |
| com.ifs.banking.fiid1359 | WPCU Mobile Banking |
| com.growfinancialfcu.growfinancialfcu | Grow Mobile Banking |
| com.nexowallet | Nexo – Crypto Banking Account |
| com.investvoyager | Voyager: Crypto Made Simple |
| com.mobileloft.alpha.droid | myAlpha Mobile |
| mbanking.NBG | NBG Mobile Banking |
| com.vivawallet.business | Viva Wallet |
| gr.winbank.mobilenext | Winbank Mobile |
| com.EurobankEFG | Eurobank Mobile App |
| io.sperax.wallet | Sperax Play |
| ru.sberbankmobile | Сбербанк Онлайн |
| ru.otpbank.mobile | ОТП Банк |
| ru.letobank.Prometheus | Почта Банк |
| ge.lb.mobilebank | Liberty |
| com.idamob.tinkoff.android | Tinkoff |
| ru.bankuralsib.mb.android | Мобильный банк УРАЛСИБ |
| gr.nbg.go4more | go4more |
| com.ubanksu | UBANK |
| ru.vtb24.mobilebanking.android | VTB-Online |
| com.mtbank | Мой банк |
| com.columbiabank3685.mobile.production | Columbia Bank |
| com.capital.etf.trade | Investments – Capital.com |
| ch.raiffeisen.twint | Raiffeisen TWINT |
| ch.postfinance.twint.android | PostFinance TWINT |
| com.csg.creditsuisse.twint | Credit Suisse TWINT – mobile payment app |
| ch.postfinance.android | PostFinance Mobile |
| com.csg.cs.dnmb | Credit Suisse Direct |
| com.ubs.swidK2Y.android | UBS Access – secure login for digital banking |
| com.ubs.swidKXJ.android | UBS Mobile Banking: E-Banking and mobile pay |
| com.neonbanking.app | neon – your account app |
| ch.raiffeisen.android | Raiffeisen E-Banking |
| com.flowbank.client | FlowBank |
| ch.bankcler.zak | Bank Cler Zak |
| com.axa.android.smartclaims.ch | MyAXA CH |
| ch.zkb.slv.mobile.client.android | eBanking Mobile |
| com.swissborg.android | SwissBorg: Invest in Crypto |
| ch.zkb.twint | ZKB TWINT |
| ch.zkb.frankly | frankly. Pillar 3a – Private pension |
| ch.bcv.mobile.android | BCV Mobile |
| at.rsg.pfp | Mein ELBA-App |
| at.erstebank.george | George Österreich |
| at.erstebank.securityapp | s Identity |
| com.bawagpsk.bawagpsk | BAWAG PSK klar – Mobile Banking App |
| com.bankaustria.android.olb | Bank Austria MobileBanking |
| at.tmobile.android.myt | Mein Magenta (AT) |
| com.bitpanda.bitpanda | Bitpanda – Buy Bitcoin in minutes |
| at.volksbank.volksbankmobile | Volksbank hausbanking |
| at.ing.diba.client.onlinebanking | ING Banking Austria |
| com.easybank.easybank | easybank App |
| at.oberbank.mbanking | Oberbank |
| de.xcom.flatexat | flatex AT |
| com.cardcomplete.completecontrol | complete Control |
| at.bank99.meine.meine | meine99 Online Banking |
| at.bks.mbanking | BKS Bank Österreich |
| at.racon.mandantvkb | VKB CONNECT |
| com.csiweb.digitalbanking.bk0617 | Viking Bank Mobile |
| com.csiweb.digitalbanking.bk0710 | Minnesota National Bank |
| dk.bec.android.mb1.b00369.prod | Spar Nord Mobilbank |
| dk.bec.android.mb1.b00020.prod | AL-Bank |
| dk.jyskebank.drb | Jyske Bank |
| dk.landbobanken.drb | Ringkjøbing Landbobank og Nordjyske Bank |
| dk.bec.android.mb1.b00019.prod | Vestjysk Bank |
| dk.nordea.mobilebank | Nordea Mobile – Denmark |
| dk.sydbank.drb | Sydbanks Mobilbank Privat |
| com.resurs.rbapp | Resurs Bank |
| com.danskebank.mobilebank3.dk | NY mobilbank DK – Danske Bank |
| nz.co.cooperativebank | The Co-operative Bank (NZ) |
| nz.co.anz.android.mobilebanking | ANZ goMoney New Zealand |
| nz.co.asb.asbmobile | ASB Mobile Banking |
| nz.co.asb.asbmobile | ASB Mobile Banking |
| nz.co.kiwibank.mobile | Kiwibank Mobile Banking |
| nz.co.westpac | Westpac One (NZ) Mobile Banking |
| com.commbank.netbank | CommBank |
| au.com.nab.mobile | NAB Mobile Banking |
| com.anz.android.gomoney | ANZ Australia |
| org.westpac.bank | Westpac Mobile Banking |
| com.bendigobank.mobile | Bendigo Bank |
| au.com.ingdirect.android | ING Australia Banking |
| org.stgeorge.bank | St.George Mobile Banking |
| au.com.bankwest.mobile | Bankwest |
| com.coinspot.app | CoinSpot – Buy & Sell Bitcoin |
| org.banksa.bank | BankSA Mobile Banking |
| au.com.heritage.app | Heritage Mobile Banking |
| org.bom.bank | Bank of Melbourne Mobile Banking |
| au.com.cua.mb | CUA Mobile Banking |
| au.com.swyftx | Swyftx Cryptocurrency Exchange – Buy, Sell & Trade |
| com.citibank.mobile.au | Citibank Australia |
| au.com.mebank.banking | ME Bank |
| au.com.newcastlepermanent | NPBS Mobile Banking |
| com.fusion.beyondbank | Beyond Bank Australia |
| com.bankofqueensland.boq | BOQ Mobile |
| com.adcb.cbgdigi | ADCB Hayyak: Start your banking relationship now! |
| com.cbd.mobile | CBD |
| com.dib.app | DIB MOBILE |
| com.mashreq.NeoApp | Mashreq Neo – Bank easy |
| com.adcb.bank | ADCB |
| enbd.mobilebanking | Emirates NBD |
| com.fab.personalbanking | FAB Mobile |
| com.adib.mobile | ADIB Mobile Banking App |
| com.rak | RAKBANK Digital Banking |
| com.adib.smartmoney | smartbanking by ADIB |
| com.alhilal.hayyak | Ahlan by Al Hilal Bank |
| com.kubi.kucoin | KuCoin: Bitcoin Exchange & Crypto Wallet |
| com.mbc.anb.keystore | ANB Mobile~ Arab National Bank |
| com.phonepe.app | PhonePe: UPI, Recharge, Investment, Insurance |
| com.rainmanagement.rain | Rain: Buy & Sell Bitcoin |
| com.BanqueMisr.MobileBanking | BM Online |
| com.riyadbank.strategic | RiyadBank Mobile |
| sa.liv.android | Liv. KSA – Digital Banking |
| com.alahli.mobile.android | SNB AlAhli Mobile |
| com.alrajhiretailapp | Al Rajhi Mobile |
| com.samba.mb | SambaMobile |
| com.sabb.mobilebanking | SABBMobile |
| com.bsffm | FransiMobile |
| com.alinma.retail.mobile | Alinma Bank |
| com.saib.banking.mobile.android | SAIB |
| com.slsp.mtoken | SLSP mToken |
| sk.slsp.georgego | George Go Slovensko |
| bank.sk365.app | 365.bank |
| sk.tb.ib.tatraandroid | Tatra banka |
| sk.csob.smarttoken | CSOB SmartToken |
| com.zentity.sbank.csobsk | SmartBanking |
| sk.vub.mobile | VÚB Mobile Banking |
| sk.tb.emv.mobile | Čítačka |
| sk.raiffeisen.ib.androidwrapper | Raiffeisen Bank SK |
| cz.homecredit.hcsk | Home Credit SK |
| com.zentity.pabk | Poštová banka |
| hr.asseco.android.jimba.mUCI.sk | SmartBanking SK |
| sk.mbank | mBank SK |
| sk.primabanka.penazenka | Peňaženka |
| com.firstdirect.bankingonthego | first direct |
| com.revolut.revolut | Revolut – Get more from your money |
| com.outsystemsenterprise.thinkmoneyprod.ThinkMoney | thinkmoney |
| com.vanso.gtbankapp | GTBank |
| com.suntrust.mobilebanking | SunTrust Mobile App |
Hydra.C Targets
| 包名称 | App名称 |
|---|---|
| com.netflix.mediaclient | Netflix |
| eu.inmite.prj.kb.mobilbank | Mobilni Banka |
| com.bitfinex.mobileapp | Bitfinex |
| com.google.android.gm | Gmail |
| es.lacaixa.mobile.android.newwapicon | CaixaBank |
| co.com.bbva.mb | BBVA Colombia |
| com.albarakaapp | Albaraka Mobile Banking |
| com.indra.itecban.triodosbank.mobile.banki | – |
| es.bancosantander.apps | Santander |
| pl.ideabank.mobilebanking | Idea Bank PL |
| pl.envelobank.aplikacja | EnveloBank |
| net.inverline.bancosabadell.officelocator.android | Banco Sabadell App. Your mobile bank |
| com.ambank.ambankonline | AmOnline |
| com.liberty.jaxx | Jaxx Liberty: Blockchain Wallet |
| com.yahoo.mobile.client.android.mail | Yahoo Mail – Organized Email |
| pl.int.poczta | INT Poczta |
| com.bitcoin.mwallet | Bitcoin Wallet |
| com.cleverlance.csas.servis24 | SERVIS 24 Mobilni banka |
| com.getingroup.mobilebanking | Getin Mobile |
| org.electrum.electrum | Electrum Bitcoin Wallet |
| com.magiclick.odeabank | Odeabank |
| com.akbank.android.apps.akbank_direkt | Akbank |
| cz.rb.app.smartphonebanking | Mobilní eKonto Raiffeisenbank |
| com.db.pwcc.dbmobile | Deutsche Bank Mobile |
| com.avuscapital.trading212 | Trading 212 – Stocks, ETFs, Forex, Gold |
| softax.pekao.powerpay | PeoPay |
| com.binance.dev | Binance – Buy & Sell Bitcoin Securely |
| com.rsi | ruralvía |
| com.connectivityapps.hotmail | Connect for Hotmail & Outlook: Mail and Calendar |
| huawei.settings.pin | – |
| com.denizbank.mobildeniz | MobilDeniz |
| com.grupoavalav1.bancamovil | AV Villas App |
| my.com.hsbc.hsbcmalaysia | HSBC Malaysia |
| eu.eleader.mobilebanking.pekao | Pekao24Makler |
| com.bcp.bank.bcp | Banca Móvil BCP |
| com.zoluxiones.officebanking | Banco Santander Perú S.A. |
| com.indra.itecban.mobile.novobanco | NBapp Spain |
| es.evobanco.bancamovil | EVO Banco móvil |
| com.rbs.mobile.android.rbs | Royal Bank of Scotland Mobile Banking |
| samsung.settings.pin | – |
| com.grupocajamar.wefferent | Grupo Cajamar |
| com.samsung.android.email.provider | Samsung Email |
| com.clairmail.fth | Fifth Third Mobile Banking |
| com.hittechsexpertlimited.hitbtc | HitBTC – Bitcoin Trading and Crypto Exchange |
| de.dkb.portalapp | DKB-Banking |
| io.totalcoin.wallet | Bitcoin Wallet Totalcoin – Buy and Sell Bitcoin |
| pe.com.interbank.mobilebanking | Interbank APP |
| cz.fio.sb2 | Fio Smartbanking CZ |
| es.caixaontinyent.caixaontinyentapp | Caixa Ontinyent |
| de.fiducia.smartphone.android.banking.vr | VR Banking Classic |
| com.polehin.android | Bitcoin Wallet – Buy BTC |
| com.pozitron.iscep | İşCep – Mobile Banking |
| com.cajaingenieros.android.bancamovil | Caja de Ingenieros Banca MÓVIL |
| wit.android.bcpBankingApp.millenniumPL | Bank Millennium |
| es.ibercaja.ibercajaapp | Ibercaja |
| alior.bankingapp.android | Usługi Bankowe |
| pl.interia.poczta_next | Nowa Poczta Interia |
| com.mobillium.papara | Papara |
| com.uphold.wallet | Uphold – Trade, Invest, Send Money For Zero Fees |
| pl.cinkciarz | Currency Exchange Conotoxia |
| com.nearform.ptsb | permanent tsb |
| com.db.mm.norisbank | norisbank App |
| com.konylabs.cbplpat | Citi Handlowy |
| tr.com.sekerbilisim.mbank | ŞEKER MOBİL ŞUBE |
| cz.csob.smartbanking.era | Smartbanking PS |
| com.citi.citimobile | Citi Mobile® |
| pl.onet.mail | Onet Poczta – e-mail app |
| com.cooperativebank.bank | The Co-operative Bank |
| cz.equabank.mobilebanking | Equa bank |
| com.pttfinans | PTTBank |
| es.univia.unicajamovil | UnicajaMovil |
| com.garanti.cepsubesi | Garanti BBVA Mobile |
| my.com.maybank2u.m2umobile | Maybank2u MY |
| cz.seznam.email | Email.cz |
| es.pibank.customers | Pibank |
| com.coinbase.android | Coinbase – Buy & Sell Bitcoin. Crypto Wallet |
| de.ingdiba.bankingapp | ING Banking to go |
| com.bancodebogota.bancamovil | Banco de Bogotá |
| com.tecnocom.cajalaboral | Banca Móvil Laboral Kutxa |
| com.teb | CEPTETEB |
| eu.netinfo.colpatria.system | Scotiabank Colpatria |
| com.btcturk.pro | BtcTurk PRO – Bitcoin Al-Sat |
| com.citibanamex.banamexmobile | Citibanamex Móvil |
| io.cex.app.prod | CEX.IO Cryptocurrency Exchange |
| com.plunien.poloniex | Poloniex Crypto Exchange |
| pl.raiffeisen.nfc | Mobilny Portfel |
| es.openbank.mobile | Openbank – banca móvil |
| uk.co.metrobankonline.mobile.android.production | Metro Bank |
| com.tmobtech.halkbank | Halkbank Mobil |
| uk.co.mbna.cardservices.android | MBNA – Card Services App |
| pl.wp.wppoczta | WP Poczta |
| pl.ing.mojeing | Moje ING mobile |
| com.citibank.CitibankMY | Citibank MY |
| pl.pkobp.iko | IKO |
| pl.wp.pocztao2 | Poczta o2 |
| com.ingbanktr.ingmobil | ING Mobil |
| com.tdbank | TD Bank (US) |
| om.instagram.android | – |
| cash.klever.blockchain.wallet | Klever Wallet: Buy Bitcoin, Ethereum, Tron, Crypto |
| com.finansbank.mobile.cepsube | QNB Finansbank Mobile Banking |
| com.myetherwallet.mewwallet | MEW wallet – Ethereum wallet |
| com.finanteq.finance.bgz | BNP Paribas GOMobile |
| com.moneybookers.skrillpayments.neteller | NETELLER – fast, secure and global money transfers |
| com.grppl.android.shell.halifax | Halifax: the banking app that gives you extra |
| cz.mbank | mBank CZ |
| com.grupoavaloc1.bancamovil | Banco de Occidente Móvil |
| cz.fio.android.smartbroker | Fio Smartbroker |
| com.todo1.mobile | Bancolombia App Personas |
| uk.co.hsbc.hsbcukmobilebanking | HSBC UK Mobile Banking |
| com.ubercab | Uber – Request a ride |
| com.Bither.one | Bither |
| com.electroneum.mobile | Electroneum |
| com.ykb.android | Yapı Kredi Mobile |
| com.alibaba.aliexpresshd | AliExpress – Smarter Shopping, Better Living |
| uk.co.tescomobile.android | Tesco Mobile |
| com.microsoft.office.outlook | Microsoft Outlook: Organize Your Email & Calendar |
| com.amazon.mShop.android.shopping | Amazon Shopping – Search, Find, Ship, and Save |
| pl.nestbank.nestbank | Nest Bank nowy |
| pl.noblebank.mobile | Noble Mobile |
| com.suntrust.mobilebanking | SunTrust Mobile App |
| app.wizink.es | WiZink, tu banco senZillo |
| co.bitx.android.wallet | Luno: Buy Bitcoin, Ethereum and Cryptocurrency |
| com.grppl.android.shell.BOS | Bank of Scotland Mobile Banking: secure on the go |
| cz.csob.ceb | ČSOB CEB Mobile |
| com.starfinanz.smob.android.sfinanzstatus | Sparkasse Ihre mobile Filiale |
| finansbank.enpara | Enpara.com Cep Şubesi |
| eu.eleader.mobilebanking.invest | plusbank24 |
| es.bancosantander.empresas | Santander Empresas |
| com.bitpay.wallet | BitPay – Secure Bitcoin Wallet |
| com.okinc.okex.gp | OKEx – Bitcoin/Crypto Trading Platform |
| uk.co.santander.santanderUK | Santander Mobile Banking |
| com.comarch.mobile.banking.bgzbnpparibas.biznes | Mobile BiznesPl@net |
| tr.gov.turkiye.edevlet.kapisi | e-Devlet Kapısı |
| cz.csas.georgego | George Česká spořitelna |
| com.grppl.android.shell.CMBlloydsTSB73 | Lloyds Bank Mobile Banking: by your side |
| de.commerzbanking.mobil | Commerzbank Banking – The app at your side |
| com.mail.mobile.android.mail | mail.com mail |
| com.discoverfinancial.mobile | Discover Mobile |
| de.comdirect.android | comdirect mobile App |
| es.santander.Criptocalculadora | Criptocalculadora |
| com.kutxabank.android | Kutxabank |
| com.targoes_prod.bad | TARGOBANK – Banca a distancia |
| cz.airbank.android | My Air |
| pe.pichincha.bm | APP Banco Pichincha Perú |
| com.bbva.netcash | BBVA Net Cash: ES & PT |
| com.paypal.android.p2pmobile | PayPal Mobile Cash: Send and Request Money Fast |
| com.android.vending | Google Play |
| pl.bzwbk.bzwbk24 | Santander mobile |
| com.bbva.bbvacontigo | BBVA Spain |
| payumoney.merchantap | – |
| com.comarch.security.mobilebanking | ING Business |
| us.zoom.videomeetings | ZOOM Cloud Meetings |
| com.bbva.nxt_peru BBVA Perú | |
| com.Plus500 | Plus500: CFD Online Trading on Forex and Stocks |
| com.thanksmister.bitcoin.localtrader | Local Trader for LocalBitcoins |
| com.ubercab.eats | Uber Eats: Food Delivery |
| com.bancocajasocial.geolocation | Banco Caja Social Móvil |
| es.caixagalicia.activamovil | ABANCA- Banca Móvil |
| de.postbank.finanzassistent | Postbank Finanzassistent |
| tsb.mobilebanking | TSB Bank Mobile Banking |
| es.liberbank.cajasturapp | Banca Digital Liberbank |
| com.yoox | YOOX – Fashion, Design and Art |
| com.bitmarket.trader | Aplikacja Bitmarket |
| mobile.santander.de | Santander Mobile Banking |
| com.pnc.ecommerce.mobile | PNC Mobile |
| pl.bps.bankowoscmobilna | BPS Mobilnie |
| com.btcturk | BtcTurk Bitcoin Borsası |
| com.bankinter.launcher | Bankinter Móvil |
| eu.unicreditgroup.hvbapptan | HVB Mobile Banking |
| pl.sgb.wallet | PORTFEL SGB |
| com.bankia.wallet | Bankia Wallet |
| com.cimbmalaysia | CIMB Clicks Malaysia |
| com.whatsapp | WhatsApp Messenger |
| com.konylabs.HongLeongConnect | Hong Leong Connect Mobile Banking |
| net.bitstamp.app | Bitstamp – Buy & Sell Bitcoin at Crypto Exchange |
| pl.aliorbank.aib | Alior Mobile |
| com.facebook.katana | |
| cz.csob.smartbanking | ČSOB Smartbanking |
| com.vakifbank.mobile | VakıfBank Mobil Bankacılık |
| com.mediolanum | Banco Mediolanum España |
| com.kraken.trade | Pro: Advanced Bitcoin & Crypto Trading |
| com.ally.MobileBanking | Ally Mobile |
| pe.com.scotiabank.blpm.android.client | Scotiabank Perú |
| pl.bph | BusinessPro Lite |
| hr.asseco.android.jimba.mUCI.cz | Smart Banking |
| com.cajasur.android | Cajasur |
| com.finanteq.finance.ca | CA24 Mobile |
| cz.moneta.smartbanka | Smart Banka |
| es.cecabank.ealia2103appstore | UniPay Unicaja |
| tr.com.hsbc.hsbcturkey | HSBC Turkey |
| com.kuveytturk.mobil | Kuveyt Türk |
| com.ebay.mobile | eBay: Buy, sell, and save money on home essentials |
| com.ziraat.ziraatmobil | Ziraat Mobile |
| com.targo_prod.bad | TARGOBANK Mobile Banking |
| com.barclaycardus | Barclays US |
| cz.kb.mba.business | Mobilní banka Business |
| com.todo1.davivienda.mobileapp | Davivienda Móvil |
| hr.asseco.android.jimba.mUCI.sme.cz | Business Smart Banking |
| com.fibabanka.Fibabanka.mobile | Fibabanka Mobile |
| com.konylabs.capitalone | Capital One® Mobile |
| samsung.settings.pass | – |
| www.ingdirect.nativeframe | ING España. Banca Móvil |
| com.infonow.bofa | Bank of America Mobile Banking |
| com.nanooqit.economiaemail | Centrum.cz mail |
| de.sdvrz.ihb.mobile.app | SpardaApp |
| com.mycelium.wallet | Mycelium Bitcoin Wallet |
| es.cm.android | Bankia |
| pl.mbank | mBank PL |
| com.wf.wellsfargomobile | Wells Fargo Mobile |
| exodusmovement.exodus | Exodus: Crypto Bitcoin Wallet |
| com.cmcmarkets.android.cfd | CMC: CFD Trading |
| com.google.android.play.games | Google Play Games |
| com.rbs.mobile.android.natwest | NatWest Mobile Banking |
| cz.csas.business24 | BUSINESS 24 Mobilní banka |
| com.bbt.myfi | U by BB&T |
| com.usaa.mobile.android.usaa | USAA Mobile |
| piuk.blockchain.android | Blockchain Wallet. Bitcoin, Bitcoin Cash, Ethereum |
| com.breadwallet | BRD Bitcoin Wallet. Buy BTC Bitcoin Cash, Ethereum |
| com.engage.pbb.pbengage2my.release | PB engage MY |
转载请注明出处及链接