HKCERT ??? Android ???????????

????? zex ? 2019-5-3 21:59 ??

??????, ????Apps???.
HKCERT ??? Android ???????????

??/???????  !!

TOP

????? ?? ? 2019-5-3 22:47 ??


????? HKCERT ????????????? CNCERT ???……????? CNCERT ???

…???? VirtualTotal ???????????? Antiy ? AVL ????????????????????? Trojan[Ransom]/Android.Congur ??



???apps?????

virustotal ??? app?
https://www.virustotal.com/#/fil ... a221ca2c460/details

virustotal ?? app?
https://www.virustotal.com/#/fil ... 0b046b06781/details

???scan????
???? app ?? Permissions????

TOP

?????????

TOP

提示: 作者被禁止或刪除 內容自動屏蔽

TOP

?????????
chue ??? 2019-5-3 22:47

virustotal ???? app ?
https://www.virustotal.com/#/file/b4b31565146ffb55bee98f84af654d0057c49dbf9146ab26dbd35a78ca4931f3/details


Permissions
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.CAMERA
android.permission.CHANGE_WIFI_STATE
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.MANAGE_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.READ_PHONE_STATE
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.USE_CREDENTIALS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.SET_DEBUG_APP
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
android.permission.GET_ACCOUNTS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.MOUNT_UNMOUNT_FIFESYSTEMS
android.permission.READ_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_USER_PRESENT
android.permission.REQUEST_INSTALL_PACKAGES
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_APN_SETTING
getui.permission.GetuiService.com.peopledailychina.activity

TOP

[on.cc??]??????????????...?????

提示: 作者被禁止或刪除 內容自動屏蔽

TOP

????? HKCERT ????????????? CNCERT ???

????????? [1]  ????National Internet Emergency Center???CNCERT?CNCERT/CC????????????????????? ?????2002?9? [2]  ??????????????????????????????????

TOP

TOP

????? headuck ? 2019-5-4 09:53 ??

??????????
Captureb.PNG
?????????????getLineNumber() ????? stacktrace?????????crash?????????????? call ? TelephonyManager ???getLine1Number()???class ????method ???1??????????????????call???????

??HKCERT????????????????????
Capturec.PNG
???????????????????HTTPUrlConnection ????????????App?????
Capturef.PNG
???????????????URL share? facebook App!

????????? DeviceID ? MacAddress??????unique ID????????tracking???????????analytics??????????DeviceID ? MacAddress ??????????ROM?????????????Advertising ID ???????

??????????? DeviceID ? MacAddress ?????????????? http://www.cyphymedia.com ????????

TOP