APKPure v3.17.18 被植入木马

[az467]

If the user has a relatively recent version of the operating system, meaning Android 8 or higher, which doesn’t hand out root permissions willy-nilly, then it loads additional modules for the Triada Trojan. These modules, among other things, can buy premium subscriptions and download other malware.

If the device is older, running Android 6 or 7, and without security updates installed (or in some cases not even released by the vendor), and thus more easily rootable, it could be the xHelper Trojan. Removing this beast is a real challenge; even a factory reset won’t do it. Armed with root access, xHelper lets attackers do almost anything they want on the device.

https://www.kaspersky.com/blog/infected-apkpure/39273/

[Dogtler]

@Dogtler apkpure

[tankren]

只用 Apkmirror 下 play 下不了的

[RanKaede]

这商店安装 apk 前会播放菠菜广告，本来就不怎么正经。

[no1xsyzy]

@alexkkaa 原来毛子不是欧洲的，懂了

[alexkkaa]

@no1xsyzy 毛子的风格跟欧美完全两样， 杠精。你说毛子是欧美我还说毛子是东亚。 有意思吗？

[mxdzs0612]

装了个去广告版的，看了下是 v3.17.17 ，希望别有事……

[ReZer0]

那么用网页版应该就没问题了吧……我之前一直用网页版下，APP 什么的倒没装。

[asche910]

有 Play Store 为啥不用？什么，2021 还有不会上 google 的？

[skiy]

文章说是广告 SDK 内置的，估计是第三方 SDK 的锅。不过不排除 APKPURE 知道这事。

[hijoker]

卧槽，以前用过。。。

[anjianshi]

@asche910 我的小米到现在都没成功装上过 play store

[xishijt]

我就说,怎么 突然 3.17.18 就开始有这么恶心的广告,直接去下载了毛子的去广告版.看样子 apkpure 不能用了

[no1xsyzy]

@alexkkaa 这只是你的想法吧；真是难为你了

[zfatcat]

On April 8, we informed APKPure about the issue. On April 9, APKPure representatives replied that they saw the problem and were working on the fix. Shortly after that, a new version (3.17.19) appeared on the APKPure website. According to itsdescription, the update “Fixed a potential security problem, making APKPure safer to use.”
We can confirm that the problem has indeed been fixed: APKPure 3.17.19 doesn’t contain the malicious component. It is safe to use.
How to guard against Trojanized APKPure
文章后半部分好像说修复了，我看了一下好像我装的是 3.17.16 ，点进去他让我更新 19，不更新就用不了，想了一下还是卸载了，心有余悸，幸好之前没更新 18

[youbaoer]

在用 3.14.1，还行下载时不用看广告

[Pogbag]

@eggshell 竟然是李自然的，我在油管看过他好多视频

[exploreexe]

ApkPure 是李自然搞的，很早之前扒过李自然的资料，发现是他做的以后感叹怪不得这老哥知道这么多。

[rajab]

3.15.1
新版下载时有广告，换老版本了

[MaverickLee]

@no1xsyzy #44 你问下睾贵的西欧人愿不愿意和斯拉夫毛子一起做欧洲人？(doge)

[hs0000t]

看了一下，3.17.12 ，一直没更新