T00ls首发被植入XcodeGhost病毒的国内IOS应用列表清单，各厂商请对号入座

2015-09-19 10:22:45 8 18170

被植入XcodeGhost恶意代码的iOS应用向远端服务器上传的信息包含：时间、应用名字、应用标识ID、设备名字与类型、系统区域及语言、设备唯一标识UUID、网络类型。

今年以来，国内多个厂商的App使用了第三方途径下载的Xcode开发环境（非Apple正规途径），其编译后应用会自动搜集客户端信息发送至 init.icloud-analysis.com远端服务器，该病毒命名为XcodeGhost。被植入XcodeGhost恶意代码的iOS应用向远端服务器上传的信息包含：时间、应用名字、应用标识ID、设备名字与类型、系统区域及语言、设备唯一标识UUID、网络类型。

病毒的详情分析请参考：
http://drops.wooyun.org/news/8864
http://www.freebuf.com/articles/terminal/78808.html

国家互联网应急中心于2015-09-14也发出了紧急预警：《关于使用非苹果官方XCODE存在植入恶意代码情况的预警通报》，并要求：在开发苹果APP过程中，切勿使用非苹果官方渠道的XCODE工具，以维护广大用户的个人信息安全。

今晨自称病毒作者的XcodeGhost-Author在新浪微博进行了澄清：http://weibo.com/u/5704632164，称其只是一个实验性项目，并没有任何包含威胁性的行为。并公开了源码，从源码看可信度较高。



通过热心网友的支援，T00ls获得了一份近似完整的受感染APP的列表，几乎涵盖了国内各大中小数百款IOS应用。经过跟之前各大厂商公布的列表对比，发现该列表应该是真实的。所以请各大中小厂商对号入座，抓紧时间修复。

1MoneyGain/1.4
233网校/20
3K/2.3.3
4399zmxyx-APP/4.5.0
4399zmxyxhd-APP/4.5.0
58同城/6.1.8
58同城/6.1.8.1
a9vg/3.1.1
Adventure/1.5.0
AePubReaderCaiFu/2.9.0
AePubReaderChuanYue/2.4.5
AePubReaderChuanYue/2.7.2
AePubReaderChuanYue/2.9.2
AePubReaderChuanYue/3.0.1
AePubReaderChuanYue/3.0.3
AePubReaderChuanYue/3.1.0
AePubReaderChuanYue/3.1.2
AePubReaderChuanYue/3.3.2
AePubReaderChuanYue/3.3.3
AePubReaderChuanYue/3.726
AePubReaderChuanYue/3.731
AePubReaderChuanYue/3.763
AePubReaderChuanYue/5.176
AgainstWar/5.80.5
AgainstWar/5.83.2
AgainstWar/5.84
AmHexinForPad/5.82.01
AmHexinForPad/5.83.02
apollo/2
App/1
appcatalog/105
appstore/1.1.0
appstore/2.4.0
AskDoctor/7.7.4
baba/2.0.3
baba/2.1.1
BiaoQing/1.0.11
BiaoQingBao/2015.08.011
BigEatSmall/0.13
bigmama/5.1.1.6
bigmama/5.1.2.1
bigmama/5.2.1
bigmama/5.2.2
bigmama/5.3.0
BingoDu/1
BingoDu/201508251809
BirthdayReminder/101
BirthdayReminder/2568
BlogDownloader-Free/60
BLPlayer/1.6
BoXiu/1.5.5
Browser2345-iPhone/3.5.7
Browser2345-iPhone/3.6.3
Browser2345-iPhone/4.0.1
BYDFans/2.0.65
cake/1.5.0.1508272
CamCard/6.5.1.9544
CamScanner Lite/3.8.1.12060
CarrotFantasy/1.6.0.15
CarrotFantasy/1.7.0.6
CarrotFantasy/1.8.0.6
CashIn/1.0.2
CGame_main_65/1107
chatRobot/1
Chexingren/4.0.4
ChinaUnicom3.x/3.2000
cjsyr/4
cjzq3d/1.1.3
Clan/1
client iOS/1.2
Cmpi/210
cn/1.2.1
com.gfedu.CJEducation/1.3.1
com/1.0.8.0
com/1.0.9
com/1.0.9.0
com/1.0.9.2
com/1.1.0.3
com/1.1.1.1
com/1.1.1.2
cow/2009
CQBank/1.0
CQBank/2.9
CSMBP-AppStore/2.6.3.0605
CSMBP-AppStore/2.6.5.0730
csr4c3/1.0.8
CuteCUT/1715
CutSlice/2.92.2
DidDriver/2.9.3.5
Difi/1.9.2
dod/1.6.0
dod/1.6.1
dominoes/1
DouBanApp/1
DragonBattle/1.1.1
DragonOnline/1.0.3
DXSendCard/1.1.0
ED2/3.4.2
edumooc/201007
edumooc/201009
EFParents/107
egg/2024
erge_iphone_v2 iOS/2.1.0.4
erge_iphone_v2 iOS/2.2.0.3
ergeduoduoipad/1.4.0.6
ergeduoduoipad/1.5.0.1
erpaoshou/1.0.7
Eyepetizer/67
fanlibang/6.9.1
Farm Line/3
FashionMagazine/4.1.6
feeling/122
fenzhuan/1
Fht/1.3.3
fin_koala_ios/1.1.22
FinanceBank/1.0.0617
FirstPrograme/1
fish-lua iOS/1.0.9
GainOnPocket/1.0
GalaToy/1
Game/2
gangtai6/2007004
guaji/1.4.1
guaji/2.0.3
guaji_ios_login_new/1127
guaji_ios_login_new/1130
guaji_itools/3006000
guaji_pp/3.6.0
guajichuanqi iOS copy/1029
guajichuanqi pp/3.0.10
guajichuanqi pp/3.2.0
gulonggame/2.31
G买卖/2
HaiwanSale/1.0
HaixueAcademy/1.2.10
heroesoc/2.2.0
hexiProNew/4.0.4
HGAME/0.1.42.001
hk/2
Hugo/1507031050
Hugo/1508051204
Hugo/1509101436
Huilc/2662
HWDouBanApp/1
HYQvod/2.0.2
iacm/2.2
iapple/1.0.3.1
ID/4.7.2
iFlytekIME/5.1.1456.6156
iFlytekIME/5.1.1463.6450
IhaveCar/2.1.0.101
IHexin/1.1
IHexin/1.4
IHexin/2.0
IHexin/2.3
IHexin/9.25.04
IHexin/9.26.03
IHexin/9.40.02
IHexin/9.41.02
IHexin/9.42.02
IHexin/9.42.04
IHexin/9.53.02
IHexin/9.60.02
ImgoTV-iphone/4.5.1.150721
immtdchs/1.10.5
immtdchs/1.8.5
iMobii/1.0.0
iMobii/1.0.2
Inandon-iKTV/2.3.7.1
installer/3.1.4
installer/3.1.5
installer/3.1.7
installer/3.1.8
installer/3.1.9
installer/3.2.1
installer/3.2.2
installer/3.2.3
installer/3.2.5
installer/3.2.7
installer/3.2.8
installer/3.3.1
installer/3.3.2
installer/3.3.3
installer/3.3.4
iOSDudu/1.2.107
iOSDudu/1.3.0
iosOpenP/41
IOSWebservices/1.0
IphoneIJiJin/3.60.04
IphoneIJiJin/4.00.03
iRead/1.1.0.6
iVMS-4500/20150820
JiaMengNet/1.0
JiaMengNet/2
JieCaoJie/3.9
JieCaoJie/4.0
JinAiWang/1.1.2
jiukuaiyou3/3.3.1
jiukuaiyou3/3.3.1.1
jiukuaiyou3/3.3.2
jiukuaiyou3/3.3.2.1
JMDirect/1
JoJoDance/2.3.0
jojoergepaidui/2.7
juanpi3/3.3.1
juanpi3/3.3.1.2
jxw_iphone/5.3.2
KADOnlinePharmacies/94
kdjz/1.0.15
kids/1.6.3400
kxddl/1.1.4
ledo/1.3.0
living/3254
living/3485
living/89
lolcardPP/0.1.0
Lottery/4.3.3
LZCalendarFreeHJ/8.0.4.1
MagicIcecream/1.3.1
MailClientApp/76
Mamazhidemai/5.0.4
MangoSaohuo/1.2.5
MatoSDK/3.4.0.277
MatoSDK/4.0.4.284.3
MatoSDK/4.2.0.291.1
MCFriends/37
MCFriends/45
MCFriends/48
MCFriends/50
MeeLive/1
Mercury/907
MetroPay/2.0.1
mexue2/2.2.4
miraclecn/2.1.0.602
miraclecn/2.3.0.766
misty/2.0
MobileBook/1.5.3
MobileTicket/2.12
MobileTrack/3.0
ModernCombat3/1.5.0
mokasangoZC/1.4
Momo/201508271000
MSL070/1.0
MSL071/1.0
MT/4.6.2
MT/4.6.2.0
MT/5.0.1.0
Musical.ly/20150602003
My Angela/1.1
My Tom/2.6.0.5
myrgf/10
MyWeiboJingXuan/3.5.2
MyWeiboJingXuan/3.6.5
nanshen/1.165
NECatoonReader/1.1.1
newfysgcn/1.0.1
news/2630
News0916/1
nice dev/3.2.2.10
nice dev/3.2.2.11
nice dev/3.2.2.14
nice dev/3.2.2.16
nice dev/3.2.4.6
nice dev/3.2.5.2
Normandy/466
Note/1.0.6.0
nuannuan3/23457
nuannuan3HD/23457
nvshen/959
nvshen/975
NWDLoan/4.3.0.10644
Oddsfair/2.4
Online/1.13.2
Online91/1.15.0.0
OnlineiTools/1.15.0.0
OnlinePP/1.13.0.0
op_game_iOS/2.5.1
op_game_iOS/2.8
OpenCourse/4.2.7
OpenCourse/4.2.8
OPlayer HD/21020
OPlayer Lite/21043
OPlayer Lite/21051
OPlayer/21043
OPlayer/21051
OPlayerHD Lite/21020
P2P/1.0.0.17
PAI138/1.0
Parking3DCN/5.3.1.3
Parking3DCN_HD/5.3.1.2
PAYiDaiXian/3.0.0
PDFReader Free/2.7.6
peipei/2.2.4
PengPeng/240
Perfect365/4.3.16
PGYCall/3.1
PhonePlus/160
PhonePlus/171
PiQu/1.33
PNCMobileBank/3.5
PNCMobileBank/3.6
poketzoo/2.5
pp/1.02.01
PPJiJin/1.1.0
PregnancyHelper/3.2.1
PregnancyHelper/3.2.3
Ps互动教程/1.11
Ps互动教程/3.1.4
Qbao/3.1.3
Qbao/3.1.4
Qbao/3.1.5
QeeNiaoOC/1055
QiankaKey/2015082502
QiankaKey/2015090501
QiankaKey/2015091602
QYER/6.4.1
reader/7602
renpin/19
RingtoneDuoduo/1.3.0.11
RingtoneDuoduo/1.5.0.4
RingtoneDuoduo/1.6.0.2
RingtoneDuoduo/1.7.0.1
SALON242/1.0
Sanguo/1.2
Sanguo/1.4.1
Sanguo/1.41
SanGuo3/1.0.1
SanguoGame_appStore/1.3.2
SegmentFault/2.8.201509042125
SFReader/150527
sfyyq_7659/1.3.0
sfyyq_guopan/1.3.1
sfyyq_haima/1.3.1
sfyyq_i4/1.3.0
sfyyq_pp/1.3.0
sfyyq_sky/1.3.0
sfyyq_tongbu/1.3.0
sfyyq_xy/1.3.1
singleClub/1.0.1
SinopecApp/1.30.1
skylight/1.0.0.2
SOHUVideoHD/4.8.1.1
solitairefun/2.5
souyue/5.0.5
SportForm/2.0.1
SpringBoard/50
Star poker/20150403
StockRadar/5.6.1
SuperMii/1.8.4
SZHomeForumII/266
SZHomeForumII/268
taojinroad/6.1.2.3
tbrjl/1
TBWanJiZhuShou/1004
The Return of the King/1.1.0
ThousandsFishing2/1.0
TianyaQingV3/5.0.4
TianyaQingV3/5.1.0
TianyaQingV3/5.1.1.1
Tickets/34
ting/660
TQLord/3.15
Tuding_vITC_01/15205
TW copy/2
TYFH AppStore copy/13
tztMobileApp_XBSC/2.21.011
UP91_C979公务员考试/4.7.2
UrlWebViewForIpad/1.6
UZai5.2/5.3.8.4
vgame/1.4.0
video/5.5.2
video/5.6
vlook/4.5.4
WallPaper/1.2
WallPaper/2.4
WallPaper/2.4.4
WallpaperFlip/1.8
WapaMonitorNew/3.200.52
WBCa_vITA_01/1979
WBCa_vITA_01/2139
WeChat/6.2.5.19
weekend/1.3.0.0
WeiChatMessage/1
weidiaocha/1432
weLianAppDis/20150818103603
WeLoop/0903
wenku-k12/2.1.0
Wenta/33
WeShow/14
WhiteTile/3.2.5.0
Wink/1
WisdomTree/3.9
WisdomTree/3.9.2
WisdomTreeKinderGartenMaster/3.9.2
WisdomTreeTeacher/3.9.2
wohucanglong/1.1.12
wohucanglong/1.1.12.2
WoodFarm/8
WXTool/1
xbcq/1.1.4
XMRCW/2.0.5
XueFeiZhuan/1.2
xwcapp/35
xwcapp/38
xy/1.02.02
xy/1.121
xy/1.6.1
xy/1.6.3
YH_Mall_iPhone/3.3.0.1508040001
YH_Mall_iPhone/3.4.0.1508240001
YH_Mall_iPhone/3.5.0.1509020008
yintaiwang/3.1.4.1
YKComicMHB/18
YKComicMHB/19
ymatou/1.2.0.3
Ymatou/2.2.0.4
yuqimt/10.2.2
Z012IOSControl/28
ZFTQPOS3.0/3
zgxy/1.1
zhqh/2.5.1
ZhuangKeBang/1.0
zmkm/19
zzzw/1.1216
爱口袋/V1.0.0.5
爱奇艺视频/20150607183400
安心理财/2.4.1.0
邦邦熊/1.5.2
宝宝食谱/2.1.0
超能部/1.1.1.3
城事汇/51
赐云红包/1
刀塔传奇攻略/487
嘀嘀打车/3.9.6.0
嘀嘀打车/3.9.7.1
嘀嘀打车/4.0.0.6
电话归属地助手/2
电话归属地助手专业版/1
动卡空间/3.4.4.1
都市摇摇乐/2.0.0
斗牛牛/154
斗牛牛/158
豆瓣阅读/21672
多屏互动/5.5.54248
风之心/1.12
风之心/1.17
疯狂赢3张/10
疯狂赢3张_XYZS/10
高德地图/7.3.8.1038
高德地图/7.3.8.1040
高德地图/7.3.8.2037
工银融e联/1.1.2.1
工银融e联/1.1.4
购房网/2.3.3
股市热点/2.40.01
国恒信托/1
海岛奇兵攻略/701
海马玩/1.0.2
华威约租车/37
吉屋/15
集享卡/1.5.3
嘉铭宝宝起名取名—生肖解名星座运势八字排盘算命占卜/2.5
健康交行/3.26
凯立德导航/11.4.1
口袋联盟/1.2.0
快秀/1.4.1.1
快用/2.8.0.1
乐停车/1.7.3.08.31.16.19
礼包助手/1.2
美味排骨王/1.0
梦幻西游攻略/700
魔塔物语/1
拼啦/31
拼啦α/35
平安好车/2
平安证券/571
奇葩说女神来了/1.1.0
钱宝有票/1.6.0
钱咖官方版/1.5.1
青岛公交查询/2.6.0
情侣消消乐/5
任务助手1.3/1
任性付/1
任性付/2
三国名将/4.5.0.1
三国名将/4.6.0.2
三国名将/4.8.0.1
三国名将/4.9.0.0
三国演义评书/2.0.0
神回复/1.1
手机壁纸管家/1.4
书法大师/198
耍大牌/4.5.0.6
耍大牌/4.5.1
天天动听/7.9.1
天天动听/8.0.0
天天動聽/7.9.1
貼圖大全/1003
铁友火车票/5630
同步推正版/1016
同步推正版/1017
同花顺/9.53.01
同花顺/9.60.01
同花顺至尊版/9.53.01
同花顺至尊版/9.60.01
铜掌柜理财/501
网利宝/2.5.5
网易云音乐/2.7.0
网易云音乐/2.7.2
网易云音乐/2.8.0
网易云音乐/2.8.1
网易云音乐/2.8.2
网易云音乐/2.8.3
微表情大全/1003
微信练习/1
我和你/2.3.0.6
西瓜播放器/100041
下厨房/4.2.2
下厨房/4.2.4
下厨房/4.2.7
下厨房/4.2.9
下厨房/4.3.0
下厨房/4.3.1
下厨房/4.3.2
享借/1070012
新口袋ATM/1.0
信用管家/1
信用管家/3
星光亲子课堂/1
熊猫苹果助手/1011
洋码头/2.5.0.4
药给力/1.11.0
药品通/2
一元购/2.0.3
易到司机/1
英雄暴风/1.0
鹰漠旅行/5.2.0
优酷/20150520
优酷/20150620
优酷/20150711
有惊喜/1.1
有乐炸金花/1136
语玩/276
云分期/2.0.7
战舰少女攻略/700
掌中保/3441
找人工具/41999
正点购/3.2.0.0
正点购/3.2.1.0
钻石投资/2.5


该网友同时表示，该列表还应该不是最全列表。因为被感染的APP实在太多了，T00ls实在怀疑，此事有国外势力背景，因为之前斯诺登爆料过：CIA在美国桑迪亚（Sandia）国家实验室开发了一款流氓版Xcode。这个版本的Xcode会在苹果开发者的电脑中植入后门，窃取他们的个人开发密钥。

我们将继续对该事件保持关注。
类别 新闻资讯

关于作者

t00ls管理团队01829篇文章2729篇回复T00ls认证管理员，如需认证，请联系admin@t00ls.net

努力建设T00ls……努力建设T00ls……努力建设T00ls……

t00ls管理团队01
8

评论8次

要评论？请先  登录  或  注册