{"id":14517,"date":"2015-09-23T15:12:08","date_gmt":"2015-09-23T07:12:08","guid":{"rendered":"https:\/\/blog.trendmicro.com.tw\/?p=14517"},"modified":"2015-11-13T16:05:27","modified_gmt":"2015-11-13T08:05:27","slug":"%e3%80%90ios%e3%80%91xcodeghost-%e7%81%bd%e9%9b%a3%e5%88%b0%e5%ba%95%e6%98%af%e6%80%8e%e9%ba%bc%e4%be%86%e7%9a%84%ef%bc%9f%e5%90%ab%e5%8f%97%e5%bd%b1%e9%9f%bf%e6%87%89%e7%94%a8%e7%a8%8b%e5%bc%8f","status":"publish","type":"post","link":"https:\/\/blog.trendmicro.com.tw\/?p=14517","title":{"rendered":"\u3010iOS\u5b89\u5168\u3011XcodeGhost \u707d\u96e3\u5230\u5e95\u662f\u600e\u9ebc\u4f86\u7684\uff1f(\u542b\u53d7\u5f71\u97ff\u61c9\u7528\u7a0b\u5f0f\u6e05\u55ae)"},"content":{"rendered":"

\u5728 Apple \u7684\u56b4\u683c\u628a\u95dc\u4e4b\u4e0b\uff0c\u9577\u4e45\u4ee5\u4f86\uff0ciOS \u7684 App Store \u61c9\u7528\u7a0b\u5f0f\u5546\u5e97\u4e00\u76f4\u88ab\u8996\u70ba\u4e00\u500b\u5b89\u5168\u7684\u61c9\u7528\u7a0b\u5f0f\u4f86\u6e90\u3002\u4e0d\u904e\uff0c\u9019\u6a23\u7684\u7f8e\u597d\u4e16\u754c\u5df2\u7d93\u4e0d\u518d\uff0c\u56e0\u70ba\u8a72\u5546\u5e97\u88ab\u767c\u73fe\u6709\u773e\u591a\u6b63\u5e38\u7684\u61c9\u7528\u7a0b\u5f0f<\/a>\u7adf\u7136\u6697\u85cf\u8457\u60e1\u610f\u7a0b\u5f0f\u78bc\uff0c\u4e5f\u5c31\u662f\u5916\u754c\u6240\u7a31\u7684\u300cXcodeGhost\u300d(Xcode\u5e7d\u9748)\u3002<\/p>\n

\"iphone<\/a><\/p>\n

XcodeGhost \u5230\u5e95\u662f\u600e\u9ebc\u4f86\u7684\uff1fXcode \u662f Apple \u5404\u5e73\u53f0\u901a\u7528\u7684\u7a0b\u5f0f\u958b\u767c\u5de5\u5177\u5957\u4ef6\uff0c\u7136\u800c\uff0c\u4e2d\u570b\u7684\u958b\u767c\u4eba\u54e1\u8981\u5f9e\u5b98\u65b9\u7db2\u7ad9\u4e0b\u8f09\u9019\u5957\u5de5\u5177\u537b\u6709\u56f0\u96e3\uff0c\u56e0\u70ba\u6a94\u6848\u5f88\u5927 (\u597d\u5e7eGB)\uff0c\u800c\u4e14\u5f9e\u4e2d\u570b\u9023\u4e0a Apple \u5b98\u65b9\u7db2\u7ad9\u7684\u901f\u5ea6\u53c8\u5f88\u6162\u3002(\u5c0d\u4e2d\u570b\u7528\u6236\u4f86\u8aaa\uff0c\u9023\u4e0a\u4e2d\u570b\u5883\u5167\u7db2\u7ad9\u7684\u901f\u5ea6\u9060\u9060\u8d85\u904e\u9023\u5230\u570b\u5916\u3002)\u56e0\u6b64\uff0c\u8a31\u591a\u4e2d\u570b\u7684 iOS \u61c9\u7528\u7a0b\u5f0f\u958b\u767c\u4eba\u54e1\u90fd\u4e26\u975e\u5f9e\u5b98\u65b9\u7db2\u7ad9\u4e0b\u8f09 Xcode \u5de5\u5177\uff0c\u800c\u662f\u5f9e\u570b\u5167\u6a94\u6848\u5206\u4eab\u7db2\u7ad9\u4e0b\u8f09\u5225\u4eba<\/p>\n

\u4e0a\u50b3\u7684\u7248\u672c\uff1a<\/p>\n

\"\"<\/p>\n

\u5716 1\uff1a\u5206\u4eab Xcode \u7684\u7db2\u7ad9\u3002<\/em><\/p>\n

\u4f46\u554f\u984c\u4f86\u4e86\uff0c\u9019\u4e9b\u7db2\u8def\u4e0a\u5206\u4eab\u7684\u7248\u672c\uff0c\u88ab\u4eba\u5077\u5077\u63db\u6389\u4e86\u539f\u672c\u7684 CoreService<\/em> (\u6838\u5fc3\u670d\u52d9) \u6a21\u7d44\uff0c\u52a0\u5165\u4e86\u60e1\u610f\u7a0b\u5f0f\u78bc\u3002\u56e0\u6b64\uff0c\u6bcf\u500b\u5229\u7528\u9019\u4e9b\u5de5\u5177\u88fd\u4f5c\u51fa\u4f86\u7684\u61c9\u7528\u7a0b\u5f0f\u90fd\u81ea\u52d5\u5305\u542b\u4e86\u60e1\u610f\u7a0b\u5f0f\u78bc\u3002\u4ee5\u4e0b\u756b\u9762\u6293\u5716\u986f\u793a\u7a0b\u5f0f\u78bc\u4e2d\u88ab\u5077\u5077\u690d\u5165\u7684\u60e1\u610f\u7db2\u5740\uff0c\u800c\u4f7f\u7528\u9019\u4e9b\u5de5\u5177\u88fd\u4f5c\u51fa\u4f86\u7684\u7a0b\u5f0f\u5c31\u6703\u9023\u4e0a\u9019\u4e9b\u60e1\u610f\u7db2\u5740\u3002\u7b2c\u4e00\u5f35\u6293\u5716\u986f\u793a\u7684\u662f\u88ab\u6539\u904e\u7684 Xcode 6.2 \u7248\uff1b\u7b2c\u4e8c\u5f35\u5247\u662f\u88ab\u6539\u904e\u7684 6.4 \u7248\u3002\u88ab\u6539\u904e\u7684 6.4 \u7248\u9084\u6703\u8a66\u5716\u96b1\u85cf\u60e1\u610f\u7db2\u5740\uff0c\u4f01\u5716\u8499\u9a19\u8cc7\u5b89\u7814\u7a76\u4eba\u54e1\u548c\u8cc7\u5b89\u5ee0\u5546\u3002(\u76ee\u524d Apple \u6240\u63d0\u4f9b\u7684\u6700\u65b0\u7248\u672c\u662f Xcode 7\uff0c\u9084\u6709\u4e00\u500b 7.1 Beta \u6e2c\u8a66\u7248\u3002)<\/p>\n

 <\/p>\n

\"\"<\/p>\n

\u5716 2\uff1a\u88ab\u6539\u904e\u7684 Xcode 6.2\u3002<\/em><\/p>\n

 <\/p>\n

\"\"<\/p>\n

\u5716 3\uff1a\u88ab\u6539\u904e\u7684 Xcode 6.4\u3002<\/em><\/p>\n

\u53d7\u611f\u67d3\u7684\u61c9\u7528\u7a0b\u5f0f<\/em><\/strong><\/p>\n

\u4ee5\u4e0b\u5217\u8209\u4e00\u4e9b\u6697\u85cf XcodeGhost \u7a0b\u5f0f\u78bc\u7684\u61c9\u7528\u7a0b\u5f0f\u3002\u4e0d\u904e\uff0c\u7531\u65bc\u9019\u4e9b\u300c\u6697\u9ed1\u7248\u300d\u7684 Xcode \u5728\u8a31\u591a\u975e\u5b98\u65b9\u7db2\u7ad9\u4e0a\u5ee3\u6cdb\u6d41\u50b3\uff0c\u56e0\u6b64\u53ef\u80fd\u9084\u6709\u66f4\u591a\u5176\u4ed6\u61c9\u7528\u7a0b\u5f0f\u4e5f\u906d\u5230\u611f\u67d3\u3002\u8acb\u6ce8\u610f\uff0c\u622a\u81f3\u672c\u6587\u64b0\u5beb\u70ba\u6b62\uff0c\u8868\u4e2d\u7c97\u9ad4\u5b57\u6a19\u793a\u7684\u61c9\u7528\u7a0b\u5f0f\u4ecd\u53ef\u4ee5\u5728\u5b98\u65b9 App Store \u4e0a\u627e\u5230\u3002<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
BundleID<\/td>\n\u7248\u672c<\/td>\nAppLabel<\/td>\n<\/tr>\n
com.51zhangdan.cardbox<\/td>\n5.0.1<\/td>\n51\u5361\u4fdd\u9669\u7bb1<\/td>\n<\/tr>\n
com.cloud1911.mslict<\/td>\n1.0.44<\/td>\nLifeSmart<\/td>\n<\/tr>\n
cn.com.10jqka.StocksOpenClass<\/td>\n3.10.01<\/td>\n\u7092\u80a1\u516c\u5f00\u8bfe<\/td>\n<\/tr>\n
com.xiaojukeji.didi<\/td>\n3.9.7<\/td>\n\u5600\u5600\u6253\u8f66<\/td>\n<\/tr>\n
com.xiaojukeji.didi<\/td>\n4.0.0<\/td>\n\u6ef4\u6ef4\u51fa\u884c<\/td>\n<\/tr>\n
com.xiaojukeji.dididache<\/td>\n2.9.3<\/td>\n\u6ef4\u6ef4\u53f8\u673a<\/td>\n<\/tr>\n
com.dayup11.LaiDianGuiShuDiFree<\/strong><\/td>\n3.6.5<\/strong><\/td>\n\u7535\u8bdd\u5f52\u5c5e\u5730\u52a9\u624b<\/strong><\/td>\n<\/tr>\n
sniper.ChildSong<\/td>\n1.6<\/td>\n\u513f\u6b4c\u52a8\u753b\u5927\u5168<\/td>\n<\/tr>\n
com.rovio.scn.baba<\/strong><\/td>\n2.1.1<\/strong><\/td>\n\u6124\u6012\u7684\u5c0f\u9e1f2<\/strong><\/td>\n<\/tr>\n
com.appjourney.fuqi<\/strong><\/td>\n2.0.1<\/strong><\/td>\n\u592b\u59bb\u5e8a\u5934\u8bdd<\/strong><\/td>\n<\/tr>\n
com.autonavi.amap<\/td>\n7.3.8<\/td>\n\u9ad8\u5fb7\u5730\u56fe<\/td>\n<\/tr>\n
com.stockradar.radar1<\/strong><\/td>\n5.6<\/strong><\/td>\n\u80a1\u7968\u96f7\u8fbe<\/strong><\/td>\n<\/tr>\n
cn.com.10jqka.TheStockMarketHotSpots<\/strong><\/td>\n2.40.01<\/strong><\/td>\n\u80a1\u5e02\u70ed\u70b9<\/strong><\/td>\n<\/tr>\n
com.jianshu.Hugo<\/td>\n2.9.1<\/td>\nHugo<\/td>\n<\/tr>\n
com.wdj.eyepetizer<\/strong><\/td>\n1.8.0<\/strong><\/td>\nEyepetizer<\/strong><\/td>\n<\/tr>\n
com.iflytek.recinbox<\/td>\n1.0.1083<\/td>\n\u5f55\u97f3\u5b9d<\/td>\n<\/tr>\n
com.maramara.app<\/td>\n1.1.0<\/td>\n\u9a6c\u62c9\u9a6c\u62c9<\/td>\n<\/tr>\n
com.intsig.camcard.lite<\/strong><\/td>\n6.5.1<\/strong><\/td>\nCamCard<\/strong><\/td>\n<\/tr>\n
com.octInn.br<\/strong><\/td>\n6.6.0<\/strong><\/td>\nBirthdayReminder<\/strong><\/td>\n<\/tr>\n
com.chinaunicom.mobilebusiness<\/strong><\/td>\n3.2<\/strong><\/td>\n\u624b\u673a\u8425\u4e1a\u5385<\/strong><\/td>\n<\/tr>\n
cn.12306.rails12306<\/td>\n2.1<\/td>\n\u94c1\u8def12306<\/td>\n<\/tr>\n
cn.com.10jqka.IHexin<\/td>\n9.53.01<\/td>\n\u540c\u82b1\u987a<\/td>\n<\/tr>\n
cn.com.10jqka.IphoneIJiJin<\/td>\n4.20.01<\/td>\n\u540c\u82b1\u987a\u7231\u57fa\u91d1<\/td>\n<\/tr>\n
cn.com.gypsii.GyPSii.ITC<\/strong><\/td>\n7.7.2<\/strong><\/td>\n\u56fe\u9489<\/strong><\/td>\n<\/tr>\n
com.netease.videoHD<\/strong><\/td>\n10019<\/strong><\/td>\n\u7f51\u6613\u516c\u5f00\u8bfe<\/strong><\/td>\n<\/tr>\n
com.netease.cloudmusic<\/td>\n2.8.3<\/td>\n\u7f51\u6613\u4e91\u97f3\u4e50<\/td>\n<\/tr>\n
com.tencent.xin<\/td>\n6.2.5<\/td>\n\u5fae\u4fe1<\/td>\n<\/tr>\n
com.tencent.mt2<\/td>\n1.10.5<\/td>\n\u6211\u53ebMT 2<\/td>\n<\/tr>\n
com.gemd.iting<\/strong><\/td>\n4.3.8<\/strong><\/td>\n\u559c\u9a6c\u62c9\u96c5FM<\/strong><\/td>\n<\/tr>\n
com.xiachufang.recipe<\/td>\n48<\/td>\n\u4e0b\u53a8\u623f<\/td>\n<\/tr>\n
cn.com.10jqka.ThreeBoard<\/td>\n1.01.01<\/td>\n\u65b0\u4e09\u677f<\/td>\n<\/tr>\n
com.simiao-internet.yaodongli<\/td>\n1.12.0<\/td>\n\u836f\u7ed9\u529b<\/td>\n<\/tr>\n
com.gaeagame.cn.fff<\/strong><\/td>\n1.1.0<\/strong><\/td>\n\u81ea\u7531\u4e4b\u6218<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/em><\/strong>\u8868 1\uff1a\u90e8\u5206\u6697\u85cf XcodeGhost \u7a0b\u5f0f\u78bc\u7684\u61c9\u7528\u7a0b\u5f0f\u3002<\/em><\/p>\n

\u63a8\u64ad\u61c9\u7528\u7a0b\u5f0f<\/em><\/strong><\/p>\n

\u9762\u5c0d\u8f3f\u8ad6\u7684\u58d3\u529b\uff0cXcodeGhost \u4f5c\u8005\u5df2\u7d93\u5beb\u4fe1\u516c\u958b\u9053\u6b49\uff0c\u4e26\u4e14\u516c\u958b\u5176\u539f\u59cb\u7a0b\u5f0f\u78bc\u3002\u5f9e\u539f\u59cb\u78bc\u4e2d\u6211\u5011\u767c\u73fe\uff0c\u5b83\u9664\u4e86\u53ef\u80fd\u9020\u6210\u8cc7\u6599\u5916\u6d29\u4e4b\u5916\uff0c\u9084\u53ef\u80fd\u5f9e\u9060\u7aef\u63a8\u64ad (Push) \u61c9\u7528\u7a0b\u5f0f\u3002\u53d7\u5bb3\u7528\u6236\u5f88\u53ef\u80fd\u88ab\u5f15\u5c0e\u5230 App Store \u4e2d\u7684\u67d0\u500b\u61c9\u7528\u7a0b\u5f0f\u3002\u6b64\u5916\uff0cXcodeGhost \u4e5f\u53ef\u7528\u4f86\u5411\u7528\u6236\u767c\u9001\u901a\u77e5\uff0c\u9032\u800c\u5f9e\u4e8b\u8a50\u9a19\u6216\u7db2\u8def\u91e3\u9b5a\u4e4b\u985e\u7684\u6d3b\u52d5\u3002
\n\u5716 4\uff1aXcodeGhost\u4f5c\u8005\u91cb\u51fa\u7684\u539f\u59cb\u78bc\u7247\u6bb5\u3002<\/em><\/p>\n

\u53d7\u5bb3\u570b\u5bb6\u548c\u5730\u5340<\/strong><\/p>\n

\u6839\u64da\u6211\u5011\u7684\u76e3\u63a7\u8cc7\u6599\u986f\u793a\uff0c\u4e2d\u570b\u662f\u9019\u8d77\u4e8b\u4ef6\u53d7\u5bb3\u6700\u56b4\u91cd\u7684\u570b\u5bb6\u3002\u4e0d\u904e\uff0c\u5317\u7f8e\u4e5f\u906d\u53d7\u56b4\u91cd\u6253\u64ca\u3002\u9019\u4e00\u9ede\u4e26\u4e0d\u592a\u4ee4\u4eba\u610f\u5916\uff0c\u56e0\u70ba\u8a31\u591a\u53d7\u611f\u67d3\u7684\u61c9\u7528\u7a0b\u5f0f<\/a>\u4e5f\u5728\u4e2d\u570b\u4ee5\u5916\u5730\u5340\u767c\u884c\u3002<\/p>\n

\"\"
\n\u5716 5\uff1a\u53d7\u5bb3\u7684\u570b\u5bb6\u3002<\/em><\/p>\n

\u8da8\u52e2\u79d1\u6280\u5df2\u80fd\u5075\u6e2c\u542b\u6709\u9019\u985e\u60e1\u610f\u7a0b\u5f0f\u78bc\u7684\u61c9\u7528\u7a0b\u5f0f\uff0c\u8b58\u5225\u540d\u7a31\u70ba\uff1aIOS_XcodeGhost.A\u3002<\/p>\n

\u539f\u6587\u51fa\u8655\uff1aThe XcodeGhost Plague \u2013 How Did It Happen?<\/a>|\u4f5c\u8005\uff1aJu Zhu (\u884c\u52d5\u88dd\u7f6e\u5a01\u8105\u5206\u6790\u5e2b)<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

\"540x90<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

\u300a \u60f3\u4e86\u89e3\u66f4\u591a\u95dc\u65bc\u7db2\u8def\u5b89\u5168\u7684\u79d8\u8a23\u548c\u5efa\u8b70\uff0c\u53ea\u8981\u5230\u8da8\u52e2\u79d1\u6280\u7c89\u7d72\u7db2\u9801<\/a> \u6216\u4e0b\u9762\u7684\u6309\u9215\u6309\u8b9a \u300b<\/p>\n