今天闹得沸沸扬扬的 XCodeGhost，微信 6.2.5 也中招了！还有就是 盗走 22 万 icloud 信息的红包插件也中了这次的 init.icloud-analysis.com

[est]

http://www.freebuf.com/articles/terminal/78808.html

好消息是目前微信版本是6.2.6了。。。我好奇鹅厂是怎么发现并修正这个问题的？换XCode？不太可能吧。。。。

[hoogle]

可能最新一个包用 Xcode 7 提的吧。。 发布会上苹果演示有微信，也可能提前开发适配 iOS 9 的。。

[bitinn]

The important question to ask is: how is it possible to have only a certain version affected by this trojan? Is there a sudden urge to get a copy of Xcode during that period? How long has this bug been around?

[est]

@bitinn That's exactly what I thought. What triggered the sudden change of XCode for this version 6.2.6 inside Tencent?

Also CNCERT knows this issue way earlier than everyone else http://www.cert.org.cn/publish/main/12/2015/20150914152821158428128/20150914152821158428128_.html

[afterain]

@bitinn
@est
期待下集！
http://weibo.com/3181671860/CBdCPiMq7
http://weibo.com/1869036310/CBf1LE2kI
http://weibo.com/3181671860/CBe4qbkNp

[wanliang1221]

作为开发者，要下个 Android SDK 你告诉我不百度不迅雷如何下？

[lawder]

@hoogle 看这里应该是鹅厂自己无意中发现的 http://security.tencent.com/index.php/blog/msg/96

[est]

@lawder 对。今天发现了。