Apple development tool Xcode was implanted in malicious code 12306, drip taxi and other strokes

Recently unofficial channel download Apple development tools Xcode left behind the backdoor, there are a large number of apps are infected with the virus, including drip taxi, Citic Bank, China Unicom, NetEase Cloud Music, 12306, high-level map and so there are the strokes. It was analyzed that the application of the virus could pop up a fake popup window to get the user's ICloud account and password.

event details

 

At present, there are Twitter users using Charles software analysis to get, at least

1, the new version of NetEase Cloud music,

2, Citic Bank card space,

3, 12306,

4, the German map,

5, China Unicom mobile phone business,

6, Pinterest,

7, eyes,

8, NetEase public class,

9, under the kitchen,

10, 51 card safe,

11. Flush

12, drip taxi

alsoPangu Team @ Little G a little busy revealing some of the information he found about some authors. from his microblog, we learned that the author of the Xcode event is a person with an ID called Coderfun. He was in a forum to share his Baidu cloud disk in the Xcode to everyone. You can visit the reply below the original post. Alsosmall g also through social work found his stick account, also online Oh!

Safety Dog recommends everyone:

1, the timely modification of their account password, and the opening of the icloud account two authentication function.

2. Suspend the use of the App, can not stop at least do not do in-purchase and other operations.

Apple development tool Xcode was implanted in malicious code 12306, drip taxi and other strokes