{"id":100051,"date":"2018-03-13T06:00:50","date_gmt":"2018-03-13T13:00:50","guid":{"rendered":"https:\/\/unit42.paloaltonetworks.com\/?p=100051\/"},"modified":"2020-03-30T18:03:47","modified_gmt":"2020-03-31T01:03:47","slug":"unit42-henbox-chickens-come-home-roost","status":"publish","type":"post","link":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/","title":{"rendered":"HenBox: \u8607\u3063\u305f\u30ad\u30e3\u30f3\u30da\u30fc\u30f3"},"content":{"rendered":"<h2><span style=\"font-size: 18pt;\">\u8981\u7d04<\/span><br \/>\n<img  class=\"alignleft wp-image-67336 lozad\"  data-src=\"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_1.png\" alt=\"henbox_1\" width=\"154\" height=\"200\" srcset=\"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_1.png 338w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_1-230x300.png 230w\" sizes=\"(max-width: 154px) 100vw, 154px\" \/><\/h2>\n<p>\u30d1\u30ed\u30a2\u30eb\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u306e\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30c8\u30c1\u30fc\u30e0Unit 42\u306f\u3001\u3055\u307e\u3056\u307e\u306a\u6b63\u898f\u306eAndroid\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3059\u3001\u65b0\u3057\u3044Android\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3092\u6700\u8fd1\u767a\u898b\u3057\u3001\u300cHenBox\u300d\u3068\u547d\u540d\u3057\u307e\u3057\u305f\u3002\u300cHenBox\u300d\u3068\u3044\u3046\u540d\u524d\u306f\u3001\u30d1\u30c3\u30b1\u30fc\u30b8\u540d\u3084\u7f72\u540d\u8005\u306e\u60c5\u5831\u306a\u3069\u3001\u5927\u534a\u306e\u60aa\u610f\u306e\u3042\u308b\u30a2\u30d7\u30ea\u3067\u898b\u3064\u304b\u3063\u305f\u30e1\u30bf\u30c7\u30fc\u30bf\u306b\u57fa\u3065\u3044\u3066\u9078\u629e\u3057\u307e\u3057\u305f\u3002HenBox\u306f\u3001VPN\u304a\u3088\u3073Android\u30b7\u30b9\u30c6\u30e0 \u30a2\u30d7\u30ea\u306a\u3069\u306e\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3057\u3001\u591a\u304f\u306e\u5834\u5408\u3053\u308c\u3089\u306e\u30a2\u30d7\u30ea\u306e\u6b63\u898f\u30d0\u30fc\u30b8\u30e7\u30f3\u3092HenBox\u3068\u4e00\u7dd2\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3053\u3068\u3067\u3001\u30e6\u30fc\u30b6\u30fc\u3092\u3060\u307e\u3057\u3066\u6b63\u898f\u306e\u30a2\u30d7\u30ea\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305f\u3068\u601d\u308f\u305b\u307e\u3059\u3002HenBox\u304c\u304a\u3068\u308a\u3068\u3057\u3066\u4f7f\u7528\u3059\u308b\u6b63\u898f\u306e\u30a2\u30d7\u30ea\u306b\u306fGoogle Play\u3067\u898b\u3064\u304b\u308b\u3082\u306e\u3082\u3042\u308a\u307e\u3059\u304c\u3001HenBox\u30a2\u30d7\u30ea\u81ea\u4f53\u306f(Google Play\u3067\u306a\u3044)\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u306e\u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u3067\u3057\u304b\u898b\u3064\u304b\u308a\u307e\u305b\u3093\u3002<\/p>\n<p>HenBox\u306e\u6a19\u7684\u306f\u4e3b\u306b<a href=\"https:\/\/en.wikipedia.org\/wiki\/Uyghurs\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:\u30a6\u30a4\u30b0\u30eb\u65cf\">\u30a6\u30a4\u30b0\u30eb\u65cf<\/a>\u306e\u3088\u3046\u3067\u3059\u3002\u5f7c\u3089\u306f\u3001\u5c11\u6570\u6d3e\u306e<a href=\"https:\/\/en.wikipedia.org\/wiki\/Turkic_peoples\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:\u30c1\u30e5\u30eb\u30af\u8a9e\u6c11\u65cf\">\u30c1\u30e5\u30eb\u30af\u8a9e\u6c11\u65cf<\/a>\u3067\u4e3b\u306b\u30a4\u30b9\u30e9\u30e0\u6559\u5f92\u3067\u3042\u308a\u3001\u4e2d\u56fd\u5317\u897f\u90e8\u306e<a href=\"https:\/\/en.wikipedia.org\/wiki\/Xinjiang\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:\u65b0\u7586\">\u65b0\u7586<\/a>\u30a6\u30a4\u30b0\u30eb\u81ea\u6cbb\u533a\u306b\u5927\u534a\u304c\u4f4f\u3093\u3067\u3044\u307e\u3059\u3002\u307e\u305f\u3001HenBox\u306f\u3001\u4e2d\u56fd\u306e\u88fd\u9020\u696d\u8005\u3001<a href=\"https:\/\/en.wikipedia.org\/wiki\/Xiaomi\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:xiaomi\">Xiaomi<\/a>\u306b\u3088\u3063\u3066\u88fd\u9020\u3055\u308c\u305f\u30c7\u30d0\u30a4\u30b9\u3001\u304a\u3088\u3073\u540c\u793e\u306b\u3088\u3063\u3066\u88fd\u9020\u3055\u308c\u305fGoogle Android\u30d9\u30fc\u30b9\u306e\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u3067\u3042\u308b<a href=\"https:\/\/en.wikipedia.org\/wiki\/MIUI\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:miui\">MIUI<\/a>\u304c\u7a3c\u50cd\u3059\u308b\u30c7\u30d0\u30a4\u30b9\u3092\u6a19\u7684\u3068\u3057\u3066\u3044\u307e\u3059\u3002\u540c\u5730\u57df\u3067\u306e<a href=\"https:\/\/foreignpolicy.com\/2014\/04\/21\/welcome-to-the-uighur-web\/\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30a2\u30af\u30bb\u30b9\">\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30a2\u30af\u30bb\u30b9<\/a>\u306f\u3001\u30b9\u30de\u30fc\u30c8\u30d5\u30a9\u30f3\u306e\u4f7f\u7528\u304c\u307b\u3068\u3093\u3069\u3067\u3042\u308a\u3001\u8fd1\u5e74\u65b0\u7586\u306b\u304a\u3051\u308b\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306e\u5e73\u5747\u5229\u7528\u8005\u6570\u306f\u3001<a href=\"https:\/\/www.chinadaily.com.cn\/business\/tech\/2017-07\/08\/content_30041010.htm\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:\u4e2d\u56fd\">\u4e2d\u56fd<\/a>\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u5e73\u5747\u5229\u7528\u8005\u6570\u3092\u4e0a\u56de\u308b\u52e2\u3044\u3067\u3059\u3002\u7d50\u679c\u3068\u3057\u3066\u305d\u306e\u5927\u898f\u6a21\u306a\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30e6\u30fc\u30b6\u30fc\u5c64\u306f\u3001<a href=\"https:\/\/unit42.paloaltonetworks.com\/scarlet-mimic-years-long-espionage-targets-minority-activists\/\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:\u904e\u53bb\">\u904e\u53bb<\/a>\u306b<a href=\"https:\/\/securelist.com\/cyber-attacks-against-uyghur-mac-os-x-users-intensify\/64259\/\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:\u591a\u304f\u306e\">\u591a\u304f\u306e<\/a><a href=\"https:\/\/securityledger.com\/2014\/08\/study-finds-unrelenting-cyber-attacks-against-chinas-uyghurs\/\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:\u30b5\u30a4\u30d0\u30fc\u653b\u6483\">\u30b5\u30a4\u30d0\u30fc\u653b\u6483<\/a>\u306e<a href=\"https:\/\/www.rfa.org\/english\/news\/uyghur\/hackers-09062012153043.html\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u8981\u7d04:\u6a19\u7684\">\u6a19\u7684<\/a>\u306b\u306a\u3063\u3066\u304d\u307e\u3057\u305f\u3002<\/p>\n<p>HenBox\u306f\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u308b\u3068\u3001\u30c1\u30e3\u30c3\u30c8\u3001\u901a\u4fe1\u3001\u30bd\u30fc\u30b7\u30e3\u30eb \u30e1\u30c7\u30a3\u30a2\u306e\u4e3b\u6d41\u3067\u3042\u308b\u591a\u304f\u306e\u30a2\u30d7\u30ea\u306a\u3069\u3001\u30c7\u30d0\u30a4\u30b9\u306e\u3055\u307e\u3056\u307e\u306a\u30bd\u30fc\u30b9\u304b\u3089\u60c5\u5831\u3092\u7a83\u53d6\u3057\u307e\u3059\u3002\u7a83\u53d6\u3057\u305f\u60c5\u5831\u306b\u306f\u3001\u500b\u4eba\u60c5\u5831\u3084\u30c7\u30d0\u30a4\u30b9\u60c5\u5831\u306a\u3069\u304c\u3042\u308a\u307e\u3059\u3002\u6ce8\u76ee\u3059\u3079\u304d\u306f\u3001HenBox\u306f\u3001\u4fb5\u5bb3\u3057\u305f\u30c7\u30d0\u30a4\u30b9\u306e\u4f4d\u7f6e\u3092\u8ffd\u8de1\u3059\u308b\u3060\u3051\u3067\u306a\u304f\u3001\u767a\u4fe1\u3055\u308c\u305f\u300186\u306e\u30d7\u30ec\u30d5\u30a3\u30c3\u30af\u30b9\u304c\u4ed8\u3044\u305f\u3059\u3079\u3066\u306e\u96fb\u8a71\u756a\u53f7\u3092\u53ce\u96c6\u3059\u308b\u3053\u3068\u3067\u3059\u3002\u3053\u306e86\u3068\u3044\u3046\u30d7\u30ec\u30d5\u30a3\u30c3\u30af\u30b9\u306f\u3001\u4e2d\u83ef\u4eba\u6c11\u5171\u548c\u56fd\u306e\u56fd\u30b3\u30fc\u30c9\u3067\u3059\u3002HenBox\u306f\u3001\u96fb\u8a71\u306e\u30ab\u30e1\u30e9\u3084\u30de\u30a4\u30af\u306b\u3082\u30a2\u30af\u30bb\u30b9\u3057\u307e\u3059\u3002<\/p>\n<p>HenBox\u306f\u3001\u6771\u5357\u30a2\u30b8\u30a2\u306b\u304a\u3051\u308b\u653f\u6cbb\u306b\u7126\u70b9\u3092\u5f53\u3066\u305f\u6a19\u7684\u578b\u653b\u6483\u3067\u4f7f\u7528\u3055\u308c\u305f\u30a4\u30f3\u30d5\u30e9\u3068\u3064\u306a\u304c\u308a\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u653b\u6483\u8005\u306f\u3001\u5c11\u306a\u304f\u3068\u30822015\u5e74\u306b\u9061\u308b\u6d3b\u52d5\u306b\u304a\u3044\u3066\u3001PlugX\u3001Zupdax\u30019002\u3001Poison Ivy\u306a\u3069\u3001\u5225\u306e\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3092\u4f7f\u7528\u3057\u3066\u304d\u307e\u3057\u305f\u3002\u3053\u308c\u306fHenBox\u306e\u6642\u7cfb\u5217\u306b\u3082\u5408\u81f4\u3057\u3066\u304a\u308a\u3001\u5408\u8a08\u3067\u3001\u7d04200\u4ef6\u306eHenBox\u306e\u30b5\u30f3\u30d7\u30eb\u3092\u8b58\u5225\u3057\u307e\u3057\u305f\u304c\u3001\u6700\u3082\u53e4\u3044\u3082\u306e\u306f2015\u5e74\u306b\u9061\u308a\u307e\u3059\u3002\u89b3\u6e2c\u3057\u305f\u30b5\u30f3\u30d7\u30eb\u306e\u5927\u534a\u306f2017\u5e74\u4e0b\u534a\u671f\u306e\u3082\u306e\u3067\u30012016\u5e74\u306e\u30b5\u30f3\u30d7\u30eb\u306f\u3053\u308c\u3088\u308a\u3082\u5c11\u306a\u304f\u30012015\u5e74\u306e\u30b5\u30f3\u30d7\u30eb\u306f\u308f\u305a\u304b\u306a\u6570\u3067\u3059\u3002\u307e\u305f\u30012018\u5e74\u306b\u306f\u3001\u5c11\u6570\u3067\u3059\u304c\u78ba\u5b9f\u306a\u6570\u306e\u30b5\u30f3\u30d7\u30eb\u3092\u65e2\u306b\u89b3\u6e2c\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u3053\u3068\u306f\u3001\u3053\u306e\u6570\u30f6\u6708\u306b\u304a\u3044\u3066\u3082\u4f9d\u7136\u3068\u3057\u3066\u52d5\u304d\u304c\u6d3b\u767a\u306a\u3001\u6301\u7d9a\u7684\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u3067\u3042\u308b\u3053\u3068\u3092\u793a\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<h2>HENBOX\u306f\u30a6\u30a4\u30b0\u30eb\u8a9e\u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u306b\u4fb5\u5165<\/h2>\n<p>2016\u5e745\u6708\u3001HenBox\u30a2\u30d7\u30ea\u306f\u3001uyghurapps[.]net\u304b\u3089\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3055\u308c\u307e\u3057\u305f\u3002\u5177\u4f53\u7684\u306b\u306f\u3001\u3053\u306e\u30a2\u30d7\u30ea\u306fAndroid\u30d1\u30c3\u30b1\u30fc\u30b8(APK)\u30d5\u30a1\u30a4\u30eb\u3067\u3059(\u5f8c\u3067\u3088\u308a\u8a73\u3057\u304f\u8aac\u660e\u3057\u307e\u3059)\u3002\u30c9\u30e1\u30a4\u30f3\u540d\u3001\u30db\u30b9\u30c8\u3055\u308c\u3066\u3044\u308b\u30b5\u30a4\u30c8\u304a\u3088\u3073\u30b3\u30f3\u30c6\u30f3\u30c4\u306e\u8a00\u8a9e\u304b\u3089\u3001\u3053\u306e\u30b5\u30a4\u30c8\u304c\u30a6\u30a4\u30b0\u30eb\u65cf\u306e\u30e6\u30fc\u30b6\u30fc\u3092\u5bfe\u8c61\u3068\u3057\u305f\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u306e\u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u3067\u3042\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002\u3053\u306e\u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u306f\u3001\u5f53\u7136\u306e\u3053\u3068\u306a\u304c\u3089\u3001Android\u304c\u516c\u5f0f\u306b\u30b5\u30dd\u30fc\u30c8\u3057\u305f\u3082\u306e\u3067\u306f\u306a\u304f\u3001Google Play\u30b9\u30c8\u30a2\u306e\u3088\u3046\u306bGoogle\u304c\u63d0\u4f9b\u3057\u305f\u3082\u306e\u3067\u3082\u3042\u308a\u307e\u305b\u3093\u3002\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3 \u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u306f\u3001\u4e2d\u56fd\u3067\u306f\u3042\u3061\u3053\u3061\u306b\u5b58\u5728\u3057\u307e\u3059\u3002\u3053\u308c\u306b\u306f\u591a\u304f\u306e\u7406\u7531\u304c\u3042\u308a\u307e\u3059\u3002\u4e2d\u56fd\u306eOEM\u304c\u76f8\u5909\u308f\u3089\u305a\u5f37\u529b\u3067\u3042\u308b\u3053\u3068\u3001\u516c\u5f0f\u306e\u4e2d\u56fd\u306eGoogle Play\u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u304c\u306a\u3044\u3053\u3068\u3001\u6025\u62e1\u5927\u3059\u308b\u30b9\u30de\u30fc\u30c8\u30d5\u30a9\u30f3\u5e02\u5834\u306a\u3069\u3067\u3059\u3002<\/p>\n<p>2016\u5e745\u6708\u306b\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3055\u308c\u305fHenBox\u30a2\u30d7\u30ea\u306f\u3001DroidVPN\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3057\u3066\u3044\u307e\u3057\u305f\u3002\u3053\u306e\u8a18\u4e8b\u306e\u57f7\u7b46\u6642\u70b9\u3067\u306f\u3001uyghurapps[.]net\u306e\u6307\u5b9a\u3055\u308c\u305fURL\u3067\u63d0\u4f9b\u3055\u308c\u3066\u3044\u305f\u30b3\u30f3\u30c6\u30f3\u30c4\u306f\u3001DroidVPN\u30a2\u30d7\u30ea\u306e\u6b63\u898f\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u306a\u3063\u3066\u304a\u308a\u3001\u4ee5\u4e0b\u306e\u56f31\u306b\u793a\u3057\u305f\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<p><figure id=\"attachment_67375\" aria-describedby=\"caption-attachment-67375\" style=\"width: 600px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_2.png\" rel=\"wpdevart_lightbox\"><img  class=\"wp-image-67375 lozad\"  data-src=\"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_2.png\" alt=\"\u56f31 Uyghurapps[.]net\u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u306b\u73fe\u5728\u3042\u308bDroidVPN\u30a2\u30d7\u30ea\" width=\"600\" height=\"691\" srcset=\"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_2.png 683w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_2-260x300.png 260w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_2-370x426.png 370w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><figcaption id=\"caption-attachment-67375\" class=\"wp-caption-text\">\u56f31 Uyghurapps[.]net\u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u306b\u73fe\u5728\u3042\u308bDroidVPN\u30a2\u30d7\u30ea<\/figcaption><\/figure>\u4eee\u60f3\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af(VPN)\u30c4\u30fc\u30eb\u306f\u3001\u30ea\u30e2\u30fc\u30c8 \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3078\u306e\u63a5\u7d9a\u3092\u53ef\u80fd\u3068\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u901a\u4fe1\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3092\u5411\u4e0a\u3055\u305b\u307e\u3059\u3002DroidVPN\u30a2\u30d7\u30ea\u306e\u8aac\u660e\u306b\u3088\u308b\u3068\u3001\u540c\u30a2\u30d7\u30ea\u306f\u3001ICMP\u3092\u4ecb\u3057\u305f\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u30c8\u30f3\u30cd\u30ea\u30f3\u30b0\u306b\u3088\u3063\u3066\u3001\u5730\u57df\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306e\u5236\u7d04\u3001Web\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3001\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u30d0\u30a4\u30d1\u30b9\u3092\u30b5\u30dd\u30fc\u30c8\u3057\u307e\u3059\u3002\u4e00\u90e8\u306e\u6a5f\u80fd\u306f\u3001\u30c7\u30d0\u30a4\u30b9\u3092\u30eb\u30fc\u30c8\u3057\u3066\u6a5f\u80fd\u3055\u305b\u308b\u5fc5\u8981\u304c\u3042\u308a\u3001\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3 \u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u306b\u3088\u308c\u3070\u3001\u7121\u6761\u4ef6\u306e\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u304c\u5fc5\u8981\u306a\u305f\u3081\u3001\u30c7\u30d0\u30a4\u30b9\u306b\u3068\u3063\u3066\u8ffd\u52a0\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u8003\u616e\u304c\u5fc5\u8981\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>uyghurapps[.]net\u30a2\u30d7\u30ea\u30b9\u30c8\u30a2\u4e0a\u306eDroidVPN\u30a2\u30d7\u30ea\u304c\u3069\u306e\u3088\u3046\u306b\u3057\u3066\u60aa\u610f\u306e\u3042\u308bHenBox\u30a2\u30d7\u30ea\u306b\u7f6e\u304d\u63db\u3048\u3089\u308c\u305f\u306e\u304b\u5224\u660e\u3057\u3066\u3044\u307e\u305b\u3093\u304c\u3001\u3044\u304f\u3064\u304b\u306e\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u304c\u3001Windows 32\u30d3\u30c3\u30c8\u306e\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u3067Apache Web\u30b5\u30fc\u30d0\u30fc\u306e\u53e4\u3044\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u7a3c\u50cd\u3055\u305b\u3066\u3044\u305f\u30b5\u30fc\u30d0\u30fc\u306e\u5b58\u5728\u3092\u793a\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u3053\u3068\u304b\u3089\u3001\u30d1\u30c3\u30c1\u672a\u9069\u7528\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u653b\u6483\u304c\u3001\u30b5\u30fc\u30d0\u30fc\u304c\u4fb5\u5bb3\u3055\u308c\u305f\u539f\u56e0\u3068\u63a8\u6e2c\u3059\u308b\u306e\u304c\u59a5\u5f53\u3068\u8003\u3048\u307e\u3059\u3002<\/p>\n<p>2016\u5e745\u6708\u306b\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305fHenBox\u306f\u3001\u4ee5\u4e0b\u306e\u88681\u306b\u793a\u3059\u3068\u304a\u308a\u3001DroidVPN\u30a2\u30d7\u30ea\u306e\u6b63\u898f\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u306a\u308a\u3059\u307e\u3057\u3066\u3044\u307e\u3059\u3002\u540c\u3058\u30a2\u30d7\u30ea\u540dDroidVPN\u3092\u4f7f\u7528\u3057\u3001\u56f32\u306b\u793a\u3059\u3068\u304a\u308a\u3001Android\u306e\u30db\u30fc\u30e0\u753b\u9762\u3067\u30a2\u30d7\u30ea\u3092\u8868\u793a\u3059\u308b\u969b\u306b\u3001\u540c\u3058\u30a2\u30a4\u30b3\u30f3\u56f3\u5f62\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>APK SHA256<\/b><\/td>\n<td><b>\u30b5\u30a4\u30ba(\u30d0\u30a4\u30c8)<\/b><\/td>\n<td><b>\u521d\u56de\u89b3\u6e2c\u6642\u671f<\/b><\/td>\n<td><b>\u30a2\u30d7\u30ea \u30d1\u30c3\u30b1\u30fc\u30b8\u540d<\/b><\/td>\n<td><b>\u30a2\u30d7\u30ea\u540d<\/b><\/td>\n<\/tr>\n<tr>\n<td>0589bed1e3b3d6234c30061be3be1cc6685d786ab3a892a8d4dae8e2d7ed92f7<\/td>\n<td>2,740,860<\/td>\n<td>2016\u5e745\u6708<\/td>\n<td>com.android.henbox<\/td>\n<td>DroidVPN<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><i>\u88681 uyghurapps[.]net\u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u306eHenBox DroidVPN\u30a2\u30d7\u30ea\u306e\u8a73\u7d30<\/i><\/p>\n<p>&nbsp;<\/p>\n<figure id=\"attachment_67414\" aria-describedby=\"caption-attachment-67414\" style=\"width: 420px\" class=\"wp-caption aligncenter\"><img  class=\"wp-image-67414 size-full lozad\"  data-src=\"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_3.png\" alt=\"\u56f32 \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3001DroidVPN\u306b\u306a\u308a\u3059\u307e\u3057\u3066\u3044\u308bHenBox\u30a2\u30d7\u30ea\" width=\"420\" height=\"703\" srcset=\"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_3.png 420w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_3-179x300.png 179w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_3-370x619.png 370w\" sizes=\"(max-width: 420px) 100vw, 420px\" \/><figcaption id=\"caption-attachment-67414\" class=\"wp-caption-text\">\u56f32 \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3001DroidVPN\u306b\u306a\u308a\u3059\u307e\u3057\u3066\u3044\u308bHenBox\u30a2\u30d7\u30ea<\/figcaption><\/figure>\n<p>\u30c7\u30d0\u30a4\u30b9\u306e\u8a00\u8a9e\u8a2d\u5b9a\u3084HenBox\u306e\u4e9c\u7a2e\u306b\u3088\u3063\u3066\u306f\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u305fHenBox\u30a2\u30d7\u30ea\u306e\u540d\u524d\u304c\u300cBackup\u300d\u306b\u306a\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u304c\u3001\u30ed\u30b4\u306f\u540c\u3058DroidVPN\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002\u4ed6\u306e\u4e9c\u7a2e\u306f\u3001\u5f8c\u8ff0\u306e\u3068\u304a\u308a\u5225\u306e\u540d\u524d\u3068\u30ed\u30b4\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002<\/p>\n<p>HenBox\u306e\u3053\u306e\u4e9c\u7a2e\u304c\u4f7f\u7528\u3059\u308bDroidVPN\u306e\u5916\u89b3\u3068\u96f0\u56f2\u6c17\u304b\u3089\u3001DroidVPN\u306euyghurapps[.]net\u30da\u30fc\u30b8\u304c\u3001HenBox\u30a2\u30d7\u30ea\u307e\u305f\u306fDroidVPN\u30a2\u30d7\u30ea\u306e\u3069\u3061\u3089\u3067\u63d0\u4f9b\u3055\u308c\u308b\u969b\u3082\u6975\u3081\u3066\u985e\u4f3c\u3057\u3066\u3044\u305f\u305f\u3081\u3001\u6b63\u898f\u306eAPK\u30d5\u30a1\u30a4\u30eb\u306f\u9577\u3044\u3053\u3068\u77e5\u3089\u308c\u305a\u306bHenBox\u306b\u7f6e\u304d\u63db\u308f\u3063\u3066\u3044\u307e\u3057\u305f\u3002<\/p>\n<p>DroidVPN\u306e\u5916\u89b3\u3068\u96f0\u56f2\u6c17\u304c\u4f3c\u3066\u3044\u308b\u3060\u3051\u3067\u306f\u306a\u304f\u3001\u3053\u306eHenBox\u306e\u4e9c\u7a2e\u306b\u306f\u3001\u6b63\u898f\u306eDroidVPN\u30a2\u30d7\u30ea\u304cAPK\u30d1\u30c3\u30b1\u30fc\u30b8\u5185\u306b\u30a2\u30bb\u30c3\u30c8\u3068\u3057\u3066\u542b\u307e\u308c\u3066\u304a\u308a\u3001\u3044\u308f\u3070Windows Portable Executable (PE)\u30d5\u30a1\u30a4\u30eb\u5185\u306e\u30ea\u30bd\u30fc\u30b9\u9805\u76ee\u306e\u3088\u3046\u306a\u3082\u306e\u3067\u3057\u305f\u3002HenBox\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3001\u8d77\u52d5\u3055\u308c\u308b\u3068\u3001\u4ed6\u306e\u60aa\u610f\u306e\u3042\u308b\u52d5\u4f5c\u3092\u30d0\u30c3\u30af\u30b0\u30e9\u30a6\u30f3\u30c9\u3067\u884c\u3046\u969b\u306e\u304a\u3068\u308a\u3068\u3057\u3066\u57cb\u3081\u8fbc\u307e\u308c\u305f\u30a2\u30d7\u30ea\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb \u30d7\u30ed\u30bb\u30b9\u3082\u958b\u59cb\u3055\u308c\u308b\u305f\u3081\u3001\u88ab\u5bb3\u8005\u306fDroidVPN\u306a\u3069\u7279\u5b9a\u306e\u30a2\u30d7\u30ea\u306e\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3092\u8981\u6c42\u3057\u305f\u969b\u306b\u3001\u8981\u6c42\u3069\u304a\u308a\u306e\u30a2\u30d7\u30ea\u304c\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3055\u308c\u305f\u3082\u306e\u3068\u601d\u3044\u8fbc\u307f\u307e\u3059\u3002<\/p>\n<p>\u3053\u306eHenBox\u4e9c\u7a2e\u5185\u306b\u57cb\u3081\u8fbc\u307e\u308c\u305fDroidVPN\u306e\u6b63\u898f\u30d0\u30fc\u30b8\u30e7\u30f3\u306f\u3001\u3053\u306e\u8a18\u4e8b\u306e\u57f7\u7b46\u6642\u70b9\u3067\u306f\u3001uyghurapps[.]net\u304b\u3089\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3067\u304d\u308bDroidVPN\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3068\u540c\u3058\u3067\u3059\u3002DroidVPN\u306e\u3088\u308a\u65b0\u3057\u3044\u30d0\u30fc\u30b8\u30e7\u30f3\u3092Google Play\u3084\u305d\u306e\u4ed6\u306e\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3 \u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u3067\u5165\u624b\u53ef\u80fd\u3067\u3042\u308b\u3053\u3068\u306f\u6307\u6458\u3057\u3066\u304a\u304f\u3079\u304d\u3067\u3057\u3087\u3046\u3002\u3053\u306e\u3053\u3068\u304b\u3089\u3001uyghurapps[.]net\u306e\u4fdd\u5b88\u304c\u9069\u5207\u3067\u306f\u306a\u304f\u3001\u9069\u5b9c\u6700\u65b0\u7248\u306e\u30a2\u30d7\u30ea\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3055\u308c\u3066\u3044\u306a\u3044\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n<p>\u57f7\u7b46\u6642\u70b9\u3067\u306f\u3001\u4ed6\u306e\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3 \u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u3001\u516c\u5f0f\u306eGoogle Play\u30b9\u30c8\u30a2\u3067\u3001DroidVPN\u306b\u306a\u308a\u3059\u307e\u3059\u3001\u3053\u306e\u60aa\u610f\u306e\u3042\u308bHenBox\u4e9c\u7a2e\u3092\u30db\u30b9\u30c8\u3057\u3066\u3044\u308b\u3068\u3053\u308d\u306f\u3001\u5f0a\u793e\u306e\u77e5\u308b\u9650\u308a\u3001\u73fe\u5728\u3082\u904e\u53bb\u3082\u5b58\u5728\u3057\u307e\u305b\u3093\u3002<\/p>\n<h2>\u9069\u5207\u306a\u30a2\u30d7\u30ea\u3092\u9069\u5207\u306a\u30bf\u30a4\u30df\u30f3\u30b0\u3067\u63d0\u4f9b<\/h2>\n<p>\u60aa\u610f\u306e\u3042\u308bHenBox\u3068\u57cb\u3081\u8fbc\u307e\u308c\u305fDroidVPN\u30a2\u30d7\u30ea\u306e\u7d44\u307f\u5408\u308f\u305b\u306f\u3001\u653b\u6483\u8005\u304c\u88ab\u5bb3\u8005\u3092\u6b3a\u3044\u3066\u4fb5\u5bb3\u3059\u308b\u3068\u304d\u306b\u5229\u7528\u3059\u308b\u6b63\u898f\u30a2\u30d7\u30ea\u306e\u4e00\u4f8b\u3067\u3059\u3002\u3053\u308c\u3089\u306e\u653b\u6483\u8005\u306f\u3001\u591a\u304f\u306e\u5834\u5408\u3001\u60aa\u610f\u306e\u3042\u308b\u30a2\u30d7\u30ea\u3092\u3001\u6a19\u7684\u30e6\u30fc\u30b6\u30fc\u304c\u5e83\u304f\u4f7f\u7528\u3057\u3001\u91cd\u8981\u8996\u3057\u3066\u3044\u308b\u6b63\u898f\u30a2\u30d7\u30ea\u306b\u898b\u305b\u304b\u3051\u3066\u63d0\u4f9b\u3057\u307e\u3059\u3002\u3057\u304b\u3057\u3001\u7279\u7b46\u3059\u3079\u304d\u306f\u3001HenBox\u30a2\u30d7\u30ea\u306e\u7d043\u5206\u306e1\u306b\u3001\u6b63\u898f\u30a2\u30d7\u30ea\u306b\u8a72\u5f53\u3057\u306a\u3044APK\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u304c\u57cb\u3081\u8fbc\u307e\u308c\u3066\u3044\u305f\u3053\u3068\u3067\u3059\u3002ddd\u3084333\u306e\u6587\u5b57\u5217\u306a\u3069\u308f\u305a\u304b3\u30d0\u30a4\u30c8\u306e\u9577\u3055\u306e\u3082\u306e\u3084\u3001\u7834\u640d\u3057\u3066\u3044\u308b\u3082\u306e\u3082\u3042\u308a\u307e\u3057\u305f\u3002<\/p>\n<p>\u524d\u8ff0\u306eDroidVPN\u306e\u4f8b\u4ee5\u5916\u306b\u3001\u5f0a\u793e\u3067\u306f\u3001\u4ed6\u306e\u5b9f\u884c\u53ef\u80fd\u306a\u57cb\u3081\u8fbc\u307f\u30a2\u30d7\u30ea\u3067\u73fe\u5728\u3082\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3 \u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u3060\u3051\u3067\u306a\u304f\u3001Google Play\u3067\u3082\u5165\u624b\u53ef\u80fd\u306a\u3082\u306e\u304c\u3042\u308b\u3053\u3068\u304c\u308f\u304b\u3063\u3066\u3044\u307e\u3059\u3002\u88682\u3067\u306f\u3001\u3053\u308c\u3089\u306e\u30a2\u30d7\u30ea\u3092\u305d\u308c\u305e\u308c\u306e\u30e1\u30bf\u30c7\u30fc\u30bf\u3068\u3068\u3082\u306b\u30ea\u30b9\u30c8\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>\u756a\u53f7<\/b><\/td>\n<td><b>\u89aaAPK SHA256<\/b><\/td>\n<td><b>\u521d\u56de\u89b3\u6e2c\u6642\u671f<\/b><\/td>\n<td><b>\u30d1\u30c3\u30b1\u30fc\u30b8\u540d<\/b><\/p>\n<p><b>(\u89aaAPK)<\/b><\/p>\n<p><b>[\u57cb\u3081\u8fbc\u307fAPK]<\/b><\/td>\n<td><b>APK\u30a2\u30d7\u30ea\u540d<\/b><\/p>\n<p><b>(\u89aaAPK)<\/b><\/p>\n<p><b>[\u57cb\u3081\u8fbc\u307fAPK]<\/b><\/td>\n<\/tr>\n<tr>\n<td>1<\/td>\n<td>fa5a76e86abb26e48a<\/p>\n<p>f0b312f056d24000bc<\/p>\n<p>969835c40b3f98e5ca<\/p>\n<p>7e301b5bee<\/td>\n<td>2016\u5e744\u6708<\/td>\n<td>(com.android.henbox)<\/p>\n<p>[com.ziipin.software]<\/td>\n<td>(Uyghurche Kirguzguch)<\/p>\n<p>[Emojicon]<\/td>\n<\/tr>\n<tr>\n<td>2<\/td>\n<td>1749df47cf37c09a92<\/p>\n<p>b6a56b64b136f15ec<\/p>\n<p>59c4f55ec835b1e569<\/p>\n<p>c88e1c6e684<\/td>\n<td>2017\u5e745\u6708<\/td>\n<td>(cn.android.setting)<\/p>\n<p>[com.apps.amaq]<\/td>\n<td>(\u8bbe\u7f6e (Backup))<\/p>\n<p>[Amaq Agency]<\/td>\n<\/tr>\n<tr>\n<td>3<\/td>\n<td>4d437d1ac29b1762c<\/p>\n<p>c47f8094a05ab73141<\/p>\n<p>d03f9ce0256d200fc6<\/p>\n<p>91c41d1b6e7<\/td>\n<td>2017\u5e746\u6708<\/td>\n<td>(cn.android.setting)<\/p>\n<p>[com.example.ourplayer]<\/td>\n<td>(islamawazi)<\/p>\n<p>[islamawazi]<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><i>\u88682 \u57cb\u3081\u8fbc\u307f\u30a2\u30d7\u30ea\u3092\u542b\u3080HenBox\u4e9c\u7a2e\u306e\u4f8b<\/i><\/p>\n<p>\u30b5\u30f3\u30d7\u30eb1\u306f\u3001\u30a2\u30bb\u30c3\u30c8\u5185\u306b\u6b63\u898f\u306e\u30a2\u30d7\u30ea\u304c\u57cb\u3081\u8fbc\u307e\u308c\u3001\u88ab\u5bb3\u8005\u306e\u30c7\u30d0\u30a4\u30b9\u306b\u304a\u3068\u308a\u3068\u3057\u3066\u30c9\u30ed\u30c3\u30d7\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u305f\u6700\u521d\u306eHenBox\u306e\u30b5\u30f3\u30d7\u30eb\u3067\u3059\u3002\u554f\u984c\u306e\u6b63\u898f\u30a2\u30d7\u30ea\u306f\u3001\u30a6\u30a4\u30b0\u30eb\u8a9e\u3092\u30cd\u30a4\u30c6\u30a3\u30d6\u306b\u8a71\u3059\u30e6\u30fc\u30b6\u30fc\u304a\u3088\u3073\u5f7c\u3089\u306e\u30b9\u30de\u30fc\u30c8\u30d5\u30a9\u30f3\u3092\u6a19\u7684\u306b\u3057\u305f\u3001\u30a6\u30a4\u30b0\u30eb\u8a9e\u30ad\u30fc\u30dc\u30fc\u30c9 \u30a2\u30d7\u30ea\u3067\u3057\u305f\u3002<\/p>\n<p>\u30b5\u30f3\u30d7\u30eb2\u306f\u3001cn.android.setting\u3068\u3044\u3046\u30d1\u30c3\u30b1\u30fc\u30b8\u540d\u3067\u3001Android\u306e\u8a2d\u5b9a\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3057\u307e\u3059\u3002\u30d1\u30c3\u30b1\u30fc\u30b8\u540d\u304c\u9177\u4f3c\u3057\u3066\u3044\u307e\u3059(com.android.settings)\u3002\u3053\u306eHenBox\u306e\u4e9c\u7a2e\u3082\u3001\u30a2\u30d7\u30ea \u30ed\u30b4\u3068\u3057\u3066\u4e00\u822c\u7684\u306a\u7dd1\u306eAndroid\u306e\u56f3\u5f62\u3092\u4f7f\u7528\u3057\u3001\u8bbe\u7f6e(\u82f1\u8a9e\u3067Backup)\u3068\u3044\u3046\u540d\u524d\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u4e9c\u7a2e\u306e\u30a2\u30d7\u30ea\u540d\u306f\u3001\u4ed6\u306e\u591a\u304f\u3068\u540c\u69d8\u306b\u4e2d\u56fd\u8a9e\u3067\u66f8\u304b\u308c\u3066\u304a\u308a\u3001\u30a2\u30d7\u30ea\u3092\u30d0\u30c3\u30af\u30a2\u30c3\u30d7 \u30c4\u30fc\u30eb\u3068\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002<a href=\"https:\/\/unit42.paloaltonetworks.jp\/unit42-henbox-chickens-come-home-roost\/\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u9069\u5207\u306a\u30a2\u30d7\u30ea\u3092\u9069\u5207\u306a\u30bf\u30a4\u30df\u30f3\u30b0\u3067\u63d0\u4f9b:ioc\u30bb\u30af\u30b7\u30e7\u30f3\">IOC\u30bb\u30af\u30b7\u30e7\u30f3<\/a>\u3092\u78ba\u8a8d\u3057\u3066\u3001\u3059\u3079\u3066\u306e\u30a2\u30d7\u30ea\u3068\u30d1\u30c3\u30b1\u30fc\u30b8\u540d\u306e\u7d44\u307f\u5408\u308f\u305b\u3092\u3054\u89a7\u304f\u3060\u3055\u3044\u3002\u8208\u5473\u6df1\u3044\u3053\u3068\u306b\u3001\u30b5\u30f3\u30d7\u30eb2\u306e\u57cb\u3081\u8fbc\u307f\u30a2\u30d7\u30ea\u306f\u3001Android\u8a2d\u5b9a\u30a2\u30d7\u30ea\u3067\u306f\u306a\u304f\u3001Amaq Agency\u30a2\u30d7\u30ea\u3067\u3059\u3002\u3053\u306e\u30a2\u30d7\u30ea\u306f\u3001ISIS\u95a2\u9023\u306e\u30cb\u30e5\u30fc\u30b9\u3092\u30ec\u30dd\u30fc\u30c8\u3059\u308b\u30a2\u30d7\u30ea\u3067\u3059\u3002<a href=\"https:\/\/www.ibtimes.co.uk\/islamic-state-fake-version-isis-news-app-amaq-android-spying-its-supporters-1563313\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u9069\u5207\u306a\u30a2\u30d7\u30ea\u3092\u9069\u5207\u306a\u30bf\u30a4\u30df\u30f3\u30b0\u3067\u63d0\u4f9b:\u30ec\u30dd\u30fc\u30c8\">\u30ec\u30dd\u30fc\u30c8<\/a>\u3067\u306f\u3001\u4f7f\u7528\u3059\u308b\u30e6\u30fc\u30b6\u30fc\u3092\u306e\u305e\u304d\u898b\u3059\u308b\u3053\u3068\u304c\u76ee\u7684\u3068\u601d\u308f\u308c\u308b\u3001Amaq\u30a2\u30d7\u30ea\u306e\u507d\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u304c\u6307\u6458\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>\u30b5\u30f3\u30d7\u30eb2\u3092\u89b3\u6e2c\u3057\u3066\u304b\u3089\uff11\u30f6\u6708\u5f8c\u3001\u30b5\u30f3\u30d7\u30eb2\u3068\u540c\u3058\u30d1\u30c3\u30b1\u30fc\u30b8\u540d(cn.android.setting)\u3092\u4f7f\u7528\u3057\u305f\u5225\u306e\u30b5\u30f3\u30d7\u30eb\u3092\u53d6\u5f97\u3057\u307e\u3057\u305f\u3002\u3057\u304b\u3057\u3001\u3053\u306e\u3068\u304d\u306fHenBox\u3068\u57cb\u3081\u8fbc\u307f\u30a2\u30d7\u30ea\u306e\u4e21\u65b9\u306e\u30a2\u30d7\u30ea\u540d\u304c\u540c\u3058\u3067\u3001Islamawazi\u3067\u3057\u305f\u3002\u00a0 Islamawazi\u306f\u3001<a href=\"https:\/\/en.wikipedia.org\/wiki\/Turkistan_Islamic_Party\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u9069\u5207\u306a\u30a2\u30d7\u30ea\u3092\u9069\u5207\u306a\u30bf\u30a4\u30df\u30f3\u30b0\u3067\u63d0\u4f9b:\u30c8\u30eb\u30ad\u30b9\u30bf\u30f3 \u30a4\u30b9\u30e9\u30e0\u515a\u3001\u3044\u308f\u3086\u308b\u300ctip\u300d\">\u30c8\u30eb\u30ad\u30b9\u30bf\u30f3 \u30a4\u30b9\u30e9\u30e0\u515a\u3001\u3044\u308f\u3086\u308b\u300cTIP\u300d<\/a>\u3068\u3057\u3066\u3082\u77e5\u3089\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u7d44\u7e54\u306f\u3001\u4ee5\u524d\u306f\u6771\u30c8\u30eb\u30ad\u30b9\u30bf\u30f3 \u30a4\u30b9\u30e9\u30e0\u515a\u3068\u3057\u3066\u77e5\u3089\u308c\u3001\u30a6\u30a4\u30b0\u30eb\u65cf\u30b8\u30cf\u30fc\u30c7\u30a3\u30b9\u30c8\u304c\u5275\u8a2d\u3057\u305f\u30a4\u30b9\u30e9\u30e0\u904e\u6fc0\u6d3e\u5206\u96e2\u4e3b\u7fa9\u7d44\u7e54\u3068\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u57cb\u3081\u8fbc\u307f\u30a2\u30d7\u30ea\u306f\u3001\u30e1\u30c7\u30a3\u30a2 \u30d7\u30ec\u30a4\u30e4\u30fc\u3068\u601d\u308f\u308c\u307e\u3059\u3002<\/p>\n<p>\u3053\u308c\u3089\u306e\u4f8b\u306f\u3001\u6975\u3081\u3066\u7279\u5b9a\u3055\u308c\u305f\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3 \u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u306bHenBox\u30a2\u30d7\u30ea\u304c\u7f6e\u304b\u308c\u3066\u3044\u308b\u3053\u3068\u3082\u52d8\u6848\u3057\u3066\u3001\u60aa\u610f\u306e\u3042\u308b\u30a2\u30d7\u30ea\u304c\u5bfe\u8c61\u3068\u3057\u3066\u3044\u308b\u6a19\u7684\u306e\u5c11\u306a\u304f\u3068\u3082\u4e00\u90e8\u304c\u660e\u3089\u304b\u306b\u30a6\u30a4\u30b0\u30eb\u65cf\u3001\u7279\u306b\u30c6\u30ed\u30ea\u30b9\u30c8 \u30b0\u30eb\u30fc\u30d7\u306b\u95a2\u5fc3\u307e\u305f\u306f\u95a2\u9023\u304c\u3042\u308b\u4eba\u3005\u3067\u3042\u308b\u3053\u3068\u3092\u793a\u3057\u3066\u3044\u307e\u3059\u3002\u653b\u6483\u8005\u306f\u3001\u9069\u5207\u306a\u30a2\u30d7\u30ea\u3092\u9078\u629e\u3057\u3066\u3044\u308b\u3068\u601d\u308f\u308c\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30a2\u30d7\u30ea\u306f\u3001\u3053\u306e\u5730\u57df\u3067\u4e00\u822c\u7684\u3067\u3059\u3057\u3001\u6642\u671f\u7684\u306b\u3082\u4e2d\u56fd\u306e\u3053\u306e\u5730\u57df\u306b\u304a\u3051\u308b\u7dca\u5f35\u306e\u9ad8\u307e\u308a\u306b\u3088\u3063\u3066\u3001\u88ab\u5bb3\u8005\u3068\u3057\u3066\u683c\u597d\u306e\u5bfe\u8c61\u306b\u306a\u308b\u3068\u8003\u3048\u3089\u308c\u307e\u3059\u3002<\/p>\n<h2>HENBOX\u306e\u69cb\u9020<\/h2>\n<p>HenBox\u306f\u3001\u3053\u306e3\u5e74\u9593\u9032\u5316\u3092\u7d9a\u3051\u3001AutoFocus\u306b\u304a\u3051\u308b\u7d04200\u306eHenBox\u30a2\u30d7\u30ea\u306e\u3046\u3061\u5927\u534a\u306b\u3001\u30cd\u30a4\u30c6\u30a3\u30d6 \u30e9\u30a4\u30d6\u30e9\u30ea\u3068\u76ee\u6a19\u3092\u9054\u6210\u3059\u308b\u305f\u3081\u306e\u305d\u306e\u4ed6\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002\u307b\u3068\u3093\u3069\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306f\u3001\u4f55\u3089\u304b\u306e\u65b9\u6cd5\u3067\u96e3\u8aad\u5316\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30b7\u30f3\u30b0\u30eb \u30d0\u30a4\u30c8 \u30ad\u30fc\u306b\u3088\u308b\u5358\u7d14\u306aXOR\u306e\u5834\u5408\u3082\u3042\u308c\u3070\u3001RC4\u6697\u53f7\u5316\u3092\u4f7f\u7528\u3057\u3066ZIP\u307e\u305f\u306fZlib\u5727\u7e2e\u3055\u308c\u3066\u3044\u308b\u5834\u5408\u3082\u3042\u308a\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306f\u3001\u3055\u307e\u3056\u307e\u306a\u5f79\u5272\u3092\u62c5\u3063\u3066\u3044\u307e\u3059\u3002\u5fa9\u53f7\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u901a\u4fe1\u3001\u30b9\u30fc\u30d1\u30fc\u30e6\u30fc\u30b6\u30fc\u7279\u6a29\u306e\u53d6\u5f97\u3001\u30b7\u30b9\u30c6\u30e0 \u30ed\u30b0\u306e\u76e3\u8996\u3001\u8ffd\u52a0Dalvik\u30b3\u30fc\u30c9 \u30d5\u30a1\u30a4\u30eb\u306e\u30ed\u30fc\u30c9\u3001\u30c7\u30d0\u30a4\u30b9\u306e\u4f4d\u7f6e\u60c5\u5831\u8ffd\u8de1\u306a\u3069\u591a\u5c90\u306b\u308f\u305f\u308a\u307e\u3059\u3002<\/p>\n<p>\u4ee5\u964d\u3053\u306e\u30bb\u30af\u30b7\u30e7\u30f3\u3067\u306f\u3001HenBox\u3067\u4f55\u304c\u3067\u304d\u308b\u306e\u304b\u3001\u307e\u305f\u3069\u306e\u3088\u3046\u306b\u52d5\u4f5c\u3059\u308b\u306e\u304b\u306b\u3064\u3044\u3066\u3001\u30cf\u30a4\u30ec\u30d9\u30eb\u306a\u8003\u5bdf\u3092\u884c\u3044\u307e\u3059\u3002\u4ee5\u964d\u306e\u8aac\u660e\u306f\u3001\u4ee5\u4e0b\u306e\u88683\u306b\u8a18\u8f09\u3057\u305f\u30b5\u30f3\u30d7\u30eb\u306e\u5206\u6790\u306b\u57fa\u3065\u3044\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u30b5\u30f3\u30d7\u30eb\u306f\u8208\u5473\u6df1\u3044\u30b5\u30f3\u30d7\u30eb\u3067\u3001C2\u30c9\u30e1\u30a4\u30f3mefound[.]com\u304c\u3001PlugX\u3001Zupdax\u3001Poison Ivy\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3068\u91cd\u8907\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u70b9\u306b\u3064\u3044\u3066\u306f\u5f8c\u3067\u8a73\u3057\u304f\u8ff0\u3079\u307e\u3059\u3002<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>SHA256<\/b><\/td>\n<td><b>\u30d1\u30c3\u30b1\u30fc\u30b8\u540d<\/b><\/td>\n<td><b>\u30a2\u30d7\u30ea\u540d<\/b><\/td>\n<\/tr>\n<tr>\n<td>a6c7351b09a733a1b3ff8a0901c5bde<\/p>\n<p>fdc3b566bfcedcdf5a338c3a97c9f249b<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd (Backup)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><i>\u88683 \u8aac\u660e\u3067\u4f7f\u7528\u3059\u308bHenBox\u4e9c\u7a2e<\/i><\/p>\n<p>HenBox\u306e\u3053\u306e\u4e9c\u7a2e\u304c\u88ab\u5bb3\u8005\u306e\u30c7\u30d0\u30a4\u30b9\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u308b\u3068\u3001\u3053\u306e\u30a2\u30d7\u30ea\u30922\u3064\u306e\u65b9\u6cd5\u3067\u5b9f\u884c\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>HenBox\u3092\u5b9f\u884c\u3059\u308b1\u3064\u3081\u306e\u65b9\u6cd5\u306f\u3001\u88ab\u5bb3\u8005\u304c\u60aa\u610f\u306e\u3042\u308b\u30a2\u30d7\u30ea(\u3053\u306e\u4f8b\u3067\u306fBackup\u3068\u3044\u3046\u540d\u524d)\u3092\u30c7\u30d0\u30a4\u30b9\u4e0a\u306e\u30db\u30fc\u30e0\u753b\u9762\u304b\u3089\u8d77\u52d5\u3059\u308b\u3053\u3068\u3067\u3059\u3002\u4ee5\u4e0b\u306e\u56f33\u306b\u793a\u3057\u307e\u3059\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30a2\u30d7\u30ea\u306eMainActivity\u30af\u30e9\u30b9\u306eonCreate()\u30e1\u30bd\u30c3\u30c9\u306e\u30b3\u30fc\u30c9\u304c\u5b9f\u884c\u3055\u308c\u307e\u3059\u3002\u3053\u308c\u304c\u30d7\u30ed\u30b0\u30e9\u30e0\u306e\u5165\u308a\u53e3\u306b\u306a\u308a\u307e\u3059\u3002\u3053\u306e\u30d7\u30ed\u30bb\u30b9\u306f\u3001\u6b21\u306e\u629c\u7c8b\u306b\u793a\u3059\u3068\u304a\u308a\u3001\u30a2\u30d7\u30ea\u306eAndroidManifest.xml\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306b\u5b9a\u7fa9\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<pre class=\"lang:default decode:true \">&lt;activity android:excludeFromRecents=\"true\" android:label=\"@string\/app_name\" android:name=\"com.android.henbox.MainActivity\" android:theme=\"@android:style\/Theme.Translucent\"&gt;\r\n            &lt;intent-filter&gt;\r\n                &lt;action android:name=\"android.intent.action.MAIN\"\/&gt;\r\n                &lt;category android:name=\"android.intent.category.LAUNCHER\"\/&gt;\r\n            &lt;\/intent-filter&gt;\r\n        &lt;\/activity&gt;\r\n<\/pre>\n<figure id=\"attachment_67453\" aria-describedby=\"caption-attachment-67453\" style=\"width: 421px\" class=\"wp-caption aligncenter\"><img  class=\"wp-image-67453 size-full lozad\"  data-src=\"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_4.png\" alt=\"\u56f33 Android\u306e\u30db\u30fc\u30e0\u753b\u9762\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3001\u8868\u793a\u3055\u308c\u308bHenBox\u30a2\u30d7\u30ea\" width=\"421\" height=\"702\" srcset=\"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_4.png 421w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_4-180x300.png 180w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_4-370x617.png 370w\" sizes=\"(max-width: 421px) 100vw, 421px\" \/><figcaption id=\"caption-attachment-67453\" class=\"wp-caption-text\">\u56f33 Android\u306e\u30db\u30fc\u30e0\u753b\u9762\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3001\u8868\u793a\u3055\u308c\u308bHenBox\u30a2\u30d7\u30ea<\/figcaption><\/figure>\n<p>\u30b3\u30fc\u30c9 \u30c1\u30a7\u30c3\u30af\u304c\u5b9f\u884c\u3055\u308c\u3001\u30c7\u30d0\u30a4\u30b9\u304cXiaomi\u306b\u3088\u3063\u3066\u88fd\u9020\u3055\u308c\u305f\u3082\u306e\u304b\u3069\u3046\u304b\u3001\u307e\u305f\u306fXiaomi\u306eAndroid\u7528OS\u304c\u30c7\u30d0\u30a4\u30b9\u4e0a\u3067\u52d5\u4f5c\u3057\u3066\u3044\u308b\u304b\u3069\u3046\u304b\u304c\u78ba\u8a8d\u3055\u308c\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u6761\u4ef6\u4e0b\u3067\u3001\u30a2\u30d7\u30ea\u306f\u5b9f\u884c\u3092\u7d9a\u3051\u3001Xiaomi\u306e\u30c7\u30d0\u30a4\u30b9\u304a\u3088\u3073\u30e6\u30fc\u30b6\u30fc\u3092\u6a19\u7684\u3068\u3059\u308b\u610f\u56f3\u304c\u63a8\u6e2c\u3055\u308c\u307e\u3059\u3002\u3057\u304b\u3057\u3001\u66f8\u304b\u308c\u3066\u3044\u308b\u30b3\u30fc\u30c9\u304c\u3042\u307e\u308a\u6b63\u78ba\u3067\u306f\u306a\u3044\u305f\u3081\u3001\u610f\u56f3\u3057\u305f\u7bc4\u56f2\u3088\u308a\u591a\u304f\u306e\u74b0\u5883\u3067\u5b9f\u884c\u3055\u308c\u3066\u3057\u307e\u3046\u3088\u3046\u3067\u3059\u3002\u3055\u3089\u306b\u30a2\u30d7\u30ea\u304c\u30a8\u30df\u30e5\u30ec\u30fc\u30bf\u4e0a\u3067\u52d5\u4f5c\u3057\u3066\u3044\u308b\u304b\u3069\u3046\u304b\u306e\u30c1\u30a7\u30c3\u30af\u3082\u884c\u308f\u308c\u307e\u3059\u3002\u3053\u308c\u306f\u8abf\u67fb\u8005\u306e\u5206\u6790\u74b0\u5883\u3092\u56de\u907f\u3059\u308b\u3053\u3068\u304c\u76ee\u7684\u3068\u601d\u308f\u308c\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30c1\u30a7\u30c3\u30af\u306b\u5408\u683c\u3059\u308b\u3068\u3001\u30e1\u30a4\u30f3\u306eELF\u30e9\u30a4\u30d6\u30e9\u30ea\u306e1\u3064\u304c\u30ed\u30fc\u30c9\u3055\u308c\u3001\u4ed6\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3092\u8abf\u6574\u3057\u3066\u3001Java Native Interface (JNI)\u3092\u4ecb\u3057\u3001\u30a2\u30d7\u30ea\u306eDalvik\u30b3\u30fc\u30c9\u306b\u6a5f\u80fd\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/p>\n<p>HenBox\u306f\u3001\u3053\u306e\u5b9f\u884c\u304c\u521d\u3081\u3066\u304b\u3092\u3001Android\u306e\u5171\u6709\u8a2d\u5b9a\u6a5f\u80fd\u3092\u4f7f\u7528\u3057\u3066\u30c1\u30a7\u30c3\u30af\u3057\u3001XML\u30ad\u30fc\u5024\u30da\u30a2 \u30c7\u30fc\u30bf\u3092\u6c38\u7d9a\u5316\u3057\u307e\u3059\u3002\u521d\u56de\u306e\u5b9f\u884c\u3067\u3042\u308a\u3001\u30a2\u30d7\u30ea\u306e\u30d1\u30b9\u306b\/system\/app\u304c\u542b\u307e\u308c\u3066\u3044\u306a\u3044\u5834\u5408(\u3064\u307e\u308aHenBox\u304c\u30b7\u30b9\u30c6\u30e0 \u30a2\u30d7\u30ea\u3068\u3057\u52d5\u4f5c\u3057\u3066\u3044\u306a\u3044\u5834\u5408)\u3001\u5225\u306eELF\u30e9\u30a4\u30d6\u30e9\u30ea\u304c\u30ed\u30fc\u30c9\u3055\u308c\u3001\u30b9\u30fc\u30d1\u30fc\u30e6\u30fc\u30b6\u30fc \u30b3\u30de\u30f3\u30c9\u306e\u5b9f\u884c\u3092\u652f\u63f4\u3057\u307e\u3059\u3002<\/p>\n<p>HenBox\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3059\u308b2\u3064\u76ee\u306e\u65b9\u6cd5\u3067\u306f\u3001\u30a4\u30f3\u30c6\u30f3\u30c8\u3001\u30d6\u30ed\u30fc\u30c9\u30ad\u30e3\u30b9\u30c8\u3001\u30ec\u30b7\u30fc\u30d0\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002\u30a2\u30d7\u30ea\u304c\u30a4\u30f3\u30c6\u30f3\u30c8\u3092\u767b\u9332\u3057\u3066\u3001\u3053\u306e\u30b7\u30b9\u30c6\u30e0\u304b\u3089\u7279\u5b9a\u306e\u30a4\u30d9\u30f3\u30c8\u3092\u51e6\u7406\u3057\u3066\u304a\u308a\u3001\u8a72\u5f53\u30a4\u30d9\u30f3\u30c8\u306e\uff11\u3064\u304c\u767a\u751f\u3057\u305f\u5834\u5408\u3001HenBox\u306f\u3001\u8981\u6c42\u3092\u30d6\u30ed\u30fc\u30c9\u30ad\u30e3\u30b9\u30c8\u3059\u308b\u30b7\u30b9\u30c6\u30e0\u4e0a\u306e\u5225\u306e\u30a2\u30d7\u30ea\u3001\u307e\u305f\u306f\u7279\u5b9a\u30a4\u30d9\u30f3\u30c8\u304c\u767a\u751f\u3057\u305f\u3053\u3068\u3092\u30d6\u30ed\u30fc\u30c9\u30ad\u30e3\u30b9\u30c8\u3059\u308b\u30b7\u30b9\u30c6\u30e0\u81ea\u4f53\u304b\u3089\u306e\u5916\u7684\u523a\u6fc0\u306b\u3088\u3063\u3066\u5b9f\u884c\u3055\u308c\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30a4\u30f3\u30c6\u30f3\u30c8\u306f\u901a\u5e38\u3001\u30a2\u30d7\u30ea\u306eAndroidManifest.xml\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306b\u9759\u7684\u306b\u5b9a\u7fa9\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u4e00\u90e8\u306eHenBox\u4e9c\u7a2e\u3067\u306f\u3001\u5b9f\u884c\u6642\u306b\u81ea\u8eab\u306e\u30b3\u30fc\u30c9\u304b\u3089\u3055\u3089\u306b\u30a4\u30f3\u30c6\u30f3\u30c8\u304c\u767b\u9332\u3055\u308c\u307e\u3059\u3002\u5408\u81f4\u3059\u308b\u30a4\u30f3\u30c6\u30f3\u30c8\u304c\u30c8\u30ea\u30ac\u30fc\u3055\u308c\u308b\u3068\u3001\u5bfe\u5fdc\u3059\u308b\u30ec\u30b7\u30fc\u30d0 \u30b3\u30fc\u30c9\u304c\u5b9f\u884c\u3055\u308c\u3001\u4ed6\u306eHenBox\u52d5\u4f5c\u304c\u8d77\u52d5\u3055\u308c\u307e\u3059\u3002\u3053\u308c\u306b\u3064\u3044\u3066\u306f\u5f8c\u8ff0\u3057\u307e\u3059\u3002\u88684\u306f\u3001\u3053\u306eHenBox\u4e9c\u7a2e\u306eAndroidManifest.xml\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306b\u9759\u7684\u306b\u767b\u9332\u3055\u308c\u3066\u3044\u308b\u30a4\u30f3\u30c6\u30f3\u30c8\u306e\u30ea\u30b9\u30c8\u3067\u3059\u3002\u30a4\u30f3\u30c6\u30f3\u30c8\u306e\u5b9f\u884c\u5185\u5bb9\u3001\u4f7f\u7528\u30bf\u30a4\u30df\u30f3\u30b0\u306b\u3064\u3044\u3066\u3082\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002\u30c8\u30ea\u30ac\u30fc\u3055\u308c\u308b\u30a4\u30f3\u30c6\u30f3\u30c8\u306b\u5fdc\u3058\u3066\u30012\u3064\u306e\u30ec\u30b7\u30fc\u30d0\u306e\u3046\u3061\u306e1\u3064\u304c\u547c\u3073\u51fa\u3055\u308c\u307e\u3059\u3002\u3053\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3067\u306f\u3001Boot\u307e\u305f\u306fTime\u3068\u3044\u3046\u540d\u524d\u3067\u3059\u304c\u3001\u540d\u524d\u306f\u91cd\u8981\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n<table style=\"width: 100%;\">\n<tbody>\n<tr>\n<td style=\"width: 9.45077%;\">\u30ec\u30b7\u30fc\u30d0<\/td>\n<td style=\"width: 39.7328%;\">\u30a4\u30f3\u30c6\u30f3\u30c8\u540d<\/td>\n<td style=\"width: 50.3216%;\">\u8aac\u660e<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 9.45077%;\" rowspan=\"6\">BootReceiver<\/td>\n<td style=\"width: 39.7328%;\">&nbsp;<\/p>\n<p>android.intent.action.BOOT_COMPLETED<\/p>\n<p>&nbsp;<\/td>\n<td style=\"width: 50.3216%;\">\u30c7\u30d0\u30a4\u30b9\u306e\u30d6\u30fc\u30c8\u304c\u5b8c\u4e86\u3057\u305f\u3053\u3068\u3092\u793a\u3059\u30b7\u30b9\u30c6\u30e0\u901a\u77e5\u3002<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 39.7328%;\">&nbsp;<\/p>\n<p>android.intent.action.restart<\/p>\n<p>&nbsp;<\/td>\n<td style=\"width: 50.3216%;\">\u30b7\u30b9\u30c6\u30e0\u518d\u8d77\u52d5\u3092\u793a\u3059\u305f\u3081\u306b\u4f7f\u7528\u3055\u308c\u308b\u30ec\u30ac\u30b7\u30fc \u30a4\u30f3\u30c6\u30f3\u30c8\u3002<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 39.7328%;\">&nbsp;<\/p>\n<p>android.intent.action.SIM_STATE_CHANGED<\/p>\n<p>&nbsp;<\/td>\n<td style=\"width: 50.3216%;\">SIM\u30ab\u30fc\u30c9\u304c\u5909\u66f4\u3055\u308c\u305f\u304b\u3001\u9664\u53bb\u3055\u308c\u305f\u3053\u3068\u3092\u793a\u3059\u30b7\u30b9\u30c6\u30e0\u901a\u77e5\u3002<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 39.7328%;\">android.intent.action.PACKAGE_INSTALL<\/td>\n<td style=\"width: 50.3216%;\">\u30a2\u30d7\u30ea \u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u304a\u3088\u3073\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306e\u5b8c\u4e86\u3092\u793a\u3059\u30b7\u30b9\u30c6\u30e0\u901a\u77e5(\u5ec3\u6b62\u4e88\u5b9a)\u3002<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 39.7328%;\">android.intent.action.PACKAGE_ADDED<\/td>\n<td style=\"width: 50.3216%;\">\u65b0\u898f\u306e\u30a2\u30d7\u30ea \u30d1\u30c3\u30b1\u30fc\u30b8\u304c\u30c7\u30d0\u30a4\u30b9\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6e08\u307f\u3067\u3042\u308b\u3053\u3068\u3092\u793a\u3059\u30b7\u30b9\u30c6\u30e0\u901a\u77e5(\u8a72\u5f53\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u540d\u524d\u306a\u3069\uff09\u3002<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 39.7328%;\">&nbsp;<\/p>\n<p>com.xiaomi.smarthome.receive_alarm<\/p>\n<p>&nbsp;<\/td>\n<td style=\"width: 50.3216%;\">Xiaomi\u306e\u30b9\u30de\u30fc\u30c8 \u30db\u30fc\u30e0IoT\u30c7\u30d0\u30a4\u30b9\u304b\u3089\u53d7\u3051\u53d6\u3063\u305f\u901a\u77e5\u3002<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 9.45077%;\" rowspan=\"2\">TimeReceiver<\/td>\n<td style=\"width: 39.7328%;\">&nbsp;<\/p>\n<p>android.intent.action.ACTION_TIME_CHANGED<\/p>\n<p>&nbsp;<\/td>\n<td style=\"width: 50.3216%;\">\u6642\u523b\u304c\u8a2d\u5b9a\u3055\u308c\u305f\u3053\u3068\u3092\u793a\u3059\u30b7\u30b9\u30c6\u30e0\u901a\u77e5\u3002<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 39.7328%;\">android.intent.action.CONNECTIVITY_CHANGE<\/td>\n<td style=\"width: 50.3216%;\">\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u63a5\u7d9a\u306e\u5909\u66f4\u304c\u767a\u751f(\u63a5\u7d9a\u306e\u5207\u65ad\u307e\u305f\u306f\u78ba\u7acb)\u3057\u305f\u3053\u3068\u3092\u793a\u3059\u30b7\u30b9\u30c6\u30e0\u901a\u77e5\u3002Android\u30d0\u30fc\u30b8\u30e7\u30f37 (Nougat)\u4ee5\u964d\u3001\u3053\u306e\u60c5\u5831\u306f\u4ed6\u306e\u65b9\u6cd5\u306b\u3088\u3063\u3066\u53ce\u96c6\u3055\u308c\u307e\u3059\u3002\u60f3\u5b9a\u3055\u308c\u308b\u88ab\u5bb3\u8005\u304c\u4f7f\u7528\u3059\u308b\u30c7\u30d0\u30a4\u30b9\u3067\u3001\u53e4\u3044\u30d0\u30fc\u30b8\u30e7\u30f3\u306eAndroid\u304c\u52d5\u4f5c\u3057\u3066\u3044\u308b\u53ef\u80fd\u6027\u3092\u8003\u3048\u3066\u306e\u3053\u3068\u3068\u601d\u308f\u308c\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u88684 HenBox\u4e9c\u7a2e\u306e\u30a4\u30f3\u30c6\u30f3\u30c8\u304a\u3088\u3073\u30ec\u30b7\u30fc\u30d0<\/p>\n<p>AndroidManifest.xml\u30d5\u30a1\u30a4\u30eb\u306b\u767b\u9332\u3055\u308c\u305f\u30a4\u30f3\u30c6\u30f3\u30c8\u3001\u307e\u305f\u306f\u5b9f\u884c\u6642\u306b\u30ed\u30fc\u30c9\u3055\u308c\u308b\u30a4\u30f3\u30c6\u30f3\u30c8\u306e\u5927\u534a\u306f\u3001\u4e00\u822c\u7684\u306a\u60aa\u610f\u306e\u3042\u308bAndroid\u30a2\u30d7\u30ea\u3067\u306f\u3088\u304f\u898b\u3089\u308c\u308b\u3082\u306e\u3067\u3059\u3002\u3042\u307e\u308a\u4e00\u822c\u7684\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u304c\u3001\u8208\u5473\u6df1\u3044\u306e\u306f\u3001com.xiaomi.smarthome.receive_alarm\u30a4\u30f3\u30c6\u30f3\u30c8 \u30d5\u30a3\u30eb\u30bf\u304c\u542b\u307e\u308c\u3066\u3044\u308b\u3053\u3068\u3067\u3059\u3002\u4e2d\u56fd\u306e\u30a8\u30ec\u30af\u30c8\u30ed\u30cb\u30af\u30b9\u304a\u3088\u3073\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u6c11\u9593\u4f01\u696d\u3067\u3042\u308bXiaomi\u306f\u3001\u30b9\u30de\u30fc\u30c8\u30d5\u30a9\u30f3\u51fa\u8377\u53f0\u6570\u3067\u4e16\u754c\u7b2c5\u4f4d\u3001\u307e\u305f\u5bb6\u5ead\u7528IoT\u30c7\u30d0\u30a4\u30b9\u306e\u30e1\u30fc\u30ab\u30fc\u3067\u3059\u3002\u5927\u534a\u306e\u30c7\u30d0\u30a4\u30b9\u306f\u3001Xiaomi\u306e\u300cMiHome\u300dAndroid\u30a2\u30d7\u30ea\u3067\u5236\u5fa1\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u30a2\u30d7\u30ea\u306f\u3001Google Play\u3067\u5165\u624b\u3067\u304d\u3001\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u6570\u306f100\u4e07\u304b\u3089500\u4e07\u4ef6\u3067\u3059\u3002<\/p>\n<p>\u30b9\u30de\u30fc\u30c8 \u30db\u30fc\u30e0\u3067\u63a5\u7d9a\u3055\u308c\u308b\u30c7\u30d0\u30a4\u30b9\u306e\u6027\u8cea\u4e0a\u3001\u3053\u308c\u3089\u306e\u30c7\u30d0\u30a4\u30b9\u306e\u591a\u304f\u304c\u3001\u307e\u305f\u5236\u5fa1\u30a2\u30d7\u30ea\u81ea\u4f53\u304c\u3001\u304a\u4e92\u3044\u306b\u30b9\u30c6\u30fc\u30bf\u30b9\u306e\u901a\u77e5\u3001\u30a2\u30e9\u30fc\u30c8\u306a\u3069\u3092\u9001\u4fe1\u3057\u307e\u3059\u3002\u305d\u306e\u901a\u77e5\u306f\u3001\u60c5\u5831\u3092\u53d7\u3051\u53d6\u308b\u3088\u3046\u306b\u30a4\u30f3\u30c6\u30f3\u30c8\u3092\u767b\u9332\u3059\u308c\u3070\u3001MiHome\u30a2\u30d7\u30ea\u3060\u3051\u3067\u306a\u304f\u3001HenBox\u3092\u542b\u3080\u4ed6\u306e\u30a2\u30d7\u30ea\u304c\u53d7\u3051\u53d6\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3053\u308c\u306f\u3001\u5916\u90e8\u30c7\u30d0\u30a4\u30b9\u304c\u30c8\u30ea\u30ac\u30fc\u3068\u3057\u3066\u306e\u5f79\u5272\u3092\u679c\u305f\u3057\u3001\u60aa\u610f\u306e\u3042\u308bHenBox\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3057\u305f\u308a\u3001HenBox\u304c\u8ffd\u52a0\u30c7\u30fc\u30bf\u306e\u53ce\u96c6\u3084\u6f0f\u6d29\u3092\u53ef\u80fd\u306b\u3059\u308b\u3053\u3068\u3092\u610f\u5473\u3057\u307e\u3059\u3002<\/p>\n<p>HenBox\u3092\u30ed\u30fc\u30c9\u3059\u308b\u3044\u305a\u308c\u306e\u65b9\u6cd5\u3067\u3082\u3001\u6700\u7d42\u7684\u306b\u30b5\u30fc\u30d3\u30b9\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u8d77\u52d5\u3055\u308c\u307e\u3059\u3002\u3053\u306e\u30b5\u30fc\u30d3\u30b9\u306f\u3001\u30a2\u30d7\u30ea\u3092\u306f\u3063\u304d\u308a\u3068\u898b\u3048\u306a\u3044\u3088\u3046\u306b\u96a0\u3057\u3001\u5225\u306eELF\u30e9\u30a4\u30d6\u30e9\u30ea\u3092\u30ed\u30fc\u30c9\u3057\u3066\u3001\u30c7\u30d0\u30a4\u30b9\u306b\u95a2\u3059\u308b\u74b0\u5883\u60c5\u5831\u3092\u53ce\u96c6\u3057\u307e\u3059\u3002\u5b9f\u884c\u4e2d\u306e\u30d7\u30ed\u30bb\u30b9\u304a\u3088\u3073\u30a2\u30d7\u30ea\u3001\u30c7\u30d0\u30a4\u30b9 \u30cf\u30fc\u30c9\u30a6\u30a7\u30a2\u306b\u95a2\u3059\u308b\u8a73\u7d30\u60c5\u5831\u306a\u3069\u306e\u60c5\u5831\u3092\u30b7\u30b9\u30c6\u30e0 \u30ed\u30b0\u306e\u89e3\u6790\u3068\u5b9f\u884c\u4e2d\u30d7\u30ed\u30bb\u30b9\u306e\u7167\u4f1a\u306b\u3088\u3063\u3066\u53ce\u96c6\u3057\u307e\u3059\u3002\u3053\u306e\u30b5\u30fc\u30d3\u30b9\u306fBaidu\u306b\u3088\u3063\u3066\u4f5c\u6210\u3055\u308c\u305fELF\u3092\u30ed\u30fc\u30c9\u3059\u308b\u3053\u3068\u3067\u7d99\u7d9a\u3057\u307e\u3059\u3002\u3053\u308c\u306f\u3001\u30c7\u30d0\u30a4\u30b9\u306e\u4f4d\u7f6e\u60c5\u5831\u3092\u8ffd\u8de1\u3067\u304d\u3001\u30e2\u30cb\u30bf\u30fc\u3092\u8a2d\u5b9a\u3057\u3066\u3001\u767a\u4fe1\u96fb\u8a71\u306b\u95a2\u3059\u308b\u96fb\u8a71\u756a\u53f7\u3092\u53ce\u96c6\u3057\u307e\u3059\u3002\u56fd\u30b3\u30fc\u30c9+86\u306e\u30d7\u30ec\u30d5\u30a3\u30c3\u30af\u30b9\u3001\u3064\u307e\u308a\u4e2d\u83ef\u4eba\u6c11\u5171\u548c\u56fd\u306b\u95a2\u9023\u3057\u305f\u96fb\u8a71\u756a\u53f7\u3092\u53ce\u96c6\u3057\u307e\u3059\u3002<\/p>\n<p>\u3055\u3089\u306b\u4ed6\u306e\u30a2\u30bb\u30c3\u30c8\u3082\u5fa9\u53f7\u3055\u308c\u5c55\u958b\u3055\u308c\u307e\u3059\u3002\u4f8b\u3048\u3070\u3001Dalvik DEX\u30b3\u30fc\u30c9 \u30d5\u30a1\u30a4\u30eb\u306b\u306f\u3055\u307e\u3056\u307e\u306a\u6a5f\u80fd\u304c\u3042\u308a\u3001\u81ea\u8eab\u3092\u30c7\u30d0\u30a4\u30b9\u306e\u7740\u4fe1SMS\u30cf\u30f3\u30c9\u30e9\u3068\u3057\u3066\u767b\u9332\u3057\u3066\u3001SMS\u30e1\u30c3\u30bb\u30fc\u30b8\u3092\u76d7\u8074\u3057\u305f\u308a\u3001BusyBox (\u30b7\u30b9\u30c6\u30e0\u306e\u7ba1\u7406\u306b\u5f79\u7acb\u3064\u3055\u307e\u3056\u307e\u306aUnix\u30c4\u30fc\u30eb\u3092\u542b\u3080\u30d1\u30c3\u30b1\u30fc\u30b8)\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u542b\u3080\u5225\u306eELF\u30e9\u30a4\u30d6\u30e9\u30ea\u3092\u30ed\u30fc\u30c9\u3057\u307e\u3059\u3002\u307e\u305f\u8208\u5473\u6df1\u3044\u3053\u3068\u306b\u3001\u30c7\u30d0\u30a4\u30b9\u306e\u30ab\u30e1\u30e9\u3067\u5199\u771f\u3092\u64ae\u308b\u969b\u306e\u97f3\u3092\u30aa\u30d5\u306b\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u30a2\u30d7\u30ea\u306eAndroidManifest.xml\u30d5\u30a1\u30a4\u30eb\u306b\u5b9a\u7fa9\u3055\u308c\u305f\u3001HenBox\u304c\u8981\u6c42\u3059\u308bAndroid\u6a29\u9650\u306f\u3001\u4f4d\u7f6e\u60c5\u5831\u306e\u30a2\u30af\u30bb\u30b9\u3084\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u8a2d\u5b9a\u304b\u3089\u30e1\u30c3\u30bb\u30fc\u30b8\u3001\u96fb\u8a71\u3001\u9023\u7d61\u5148\u30c7\u30fc\u30bf\u306a\u3069\u3055\u307e\u3056\u307e\u3067\u3059\u3002\u307e\u305fHenBox\u306f\u3001\u30c7\u30d0\u30a4\u30b9 \u30ab\u30e1\u30e9\u3084\u30de\u30a4\u30af\u306a\u3069\u306e\u30bb\u30f3\u30b5\u30fc\u306b\u3082\u30a2\u30af\u30bb\u30b9\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>Android\u30a2\u30d7\u30ea\u81ea\u4f53\u3060\u3051\u3067\u306a\u304f\u3001\u524d\u8ff0\u306eELF\u30e9\u30a4\u30d6\u30e9\u30ea\u306a\u3069\u4ed6\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3082\u5225\u306e\u30c7\u30fc\u30bf\u7a83\u53d6\u6a5f\u80fd\u3092\u6709\u3057\u3066\u3044\u307e\u3059\u3002\u7279\u306b\u3001ELF\u30e9\u30a4\u30d6\u30e9\u30ea\u306e\uff11\u3064\u3001libloc4d.so\u306f\u3001\u30a2\u30d7\u30ea\u3067\u30c7\u30b3\u30fc\u30c9\u3055\u308c\u305fELF\u30e9\u30a4\u30d6\u30e9\u30ea \u30d5\u30a1\u30a4\u30eb\u300csux\u300d\u306e\u30ed\u30fc\u30c9\u3092\u51e6\u7406\u3057\u3001C2\u3068\u306e\u63a5\u7d9a\u3082\u62c5\u5f53\u3057\u307e\u3059\u3002<\/p>\n<p>sux\u30e9\u30a4\u30d6\u30e9\u30ea\u306f\u3001\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3055\u308c\u305f\u30b9\u30fc\u30d1\u30fc \u30e6\u30fc\u30b6\u30fc(su) \u30c4\u30fc\u30eb\u306e\u3088\u3046\u3067\u3001com.koushikdutta.superuser\u30a2\u30d7\u30ea\u306e\u30b3\u30fc\u30c9\u3092\u542b\u307f\u3001\u30b9\u30fc\u30d1\u30fc \u30e6\u30fc\u30b6\u30fc(su) \u30d0\u30a4\u30ca\u30ea\u3068\u540c\u7b49\u306e\u3082\u306e\u3092\u904b\u642c\u3057\u3001\u7279\u6a29\u30b3\u30de\u30f3\u30c9\u3092\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u5b9f\u884c\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002sux\u306e\u4e3b\u8981\u306a\u76ee\u7684\u306f\u30e1\u30c3\u30bb\u30fc\u30b8\u304a\u3088\u3073\u305d\u306e\u4ed6\u306e\u30c7\u30fc\u30bf\u3092\u3001HenBox\u30b5\u30f3\u30d7\u30eb\u5185\u3067\u6307\u5b9a\u3055\u308c\u305f\u4e00\u822c\u7684\u306a\u30e1\u30c3\u30bb\u30fc\u30b8\u30f3\u30b0\u304a\u3088\u3073\u30bd\u30fc\u30b7\u30e3\u30eb \u30e1\u30c7\u30a3\u30a2\u7528\u30a2\u30d7\u30ea\u304b\u3089\u7a83\u53d6\u3059\u308b\u3053\u3068\u306e\u3088\u3046\u3067\u3059\u3002\u540c\u3058\u30d5\u30a1\u30a4\u30eb\u540d\u306e\u540c\u69d8\u306e\u30c4\u30fc\u30eb\u306b\u3064\u3044\u3066\u3001<a href=\"https:\/\/blog.paloaltonetworks.com\/2017\/07\/unit42-spydealer-android-trojan-spying-40-apps\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:henbox\u306e\u69cb\u9020:\u4ee5\u524d\u306e\u8abf\u67fb\">\u4ee5\u524d\u306e\u8abf\u67fb<\/a>\u3067\u8b70\u8ad6\u3057\u305f\u3053\u3068\u304c\u3042\u308a\u307e\u3059\u304c\u3001SpyDealer\u30de\u30eb\u30a6\u30a7\u30a2\u306f\u3001HenBox\u3068\u7121\u95a2\u4fc2\u306a\u3088\u3046\u3067\u3059\u3002\u4e00\u822c\u7684\u306a\u653b\u6483\u30c4\u30fc\u30eb\u3067\u3042\u308b\u305f\u3081\u3001\u5225\u306e\u653b\u6483\u8005\u30b0\u30eb\u30fc\u30d7\u9593\u3067\u518d\u4f7f\u7528\u3055\u308c\u305f\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3068\u601d\u308f\u308c\u307e\u3059\u3002<\/p>\n<p>\u4e0a\u8a18\u88683\u306b\u30ea\u30b9\u30c8\u3057\u305f\u3001\u3053\u306eHenBox\u306e\u4e9c\u7a2e\u306f\u3001\u4ee5\u4e0b\u306e2\u3064\u306e\u4e00\u822c\u7684\u306a\u30e1\u30c3\u30bb\u30fc\u30b8\u30f3\u30b0 \u30a2\u30d7\u30ea\u304a\u3088\u3073\u30bd\u30fc\u30b7\u30e3\u30eb \u30e1\u30c7\u30a3\u30a2 \u30a2\u30d7\u30ea\u304b\u3089\u30c7\u30fc\u30bf\u3092\u53ce\u96c6\u3057\u307e\u3059\u3002Voxer Walkie Talkie Messenger (com.rebelvox.voxer)\u304a\u3088\u3073Tencent\u306eWeChat (com.tencent.mm)\u3067\u3059\u3002\u3053\u308c\u3089\u306e\u30bf\u30a4\u30d7\u306e\u30a2\u30d7\u30ea\u306f\u3001\u30c7\u30fc\u30bf\u3092\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306b\u683c\u7d0d\u3059\u308b\u50be\u5411\u304c\u3042\u308a\u307e\u3059\u3002\u305d\u306e\u305f\u3081\u3001\u4e00\u4f8b\u3068\u3057\u3066\u3001HenBox\u306fVoxer\u306e\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306b\u3001\/data\/data\/com.rebelvox.voxer\/databases\/rv.db\u3068\u3044\u3046\u30d5\u30a1\u30a4\u30eb\u304b\u3089\u30a2\u30af\u30bb\u30b9\u3057\u307e\u3059\u3002HenBox\u306f\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u958b\u304f\u3068\u3001\u4ee5\u4e0b\u306e\u7167\u4f1a\u3092\u5b9f\u884c\u3057\u3066\u3001\u30e1\u30c3\u30bb\u30fc\u30b8\u60c5\u5831\u3092\u53ce\u96c6\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"lang:default decode:true \">select\r\nmessages.timestamp ,messages.sender,messages.body,profiles .first || profiles .last,profiles.profile_username\r\nfrom\r\nmessages,conversations left join profiles on messages.sender=profiles.username\r\nwhere\r\nmessages.thread_id=conversations .thread_id\r\n<\/pre>\n<p>\u3053\u306e\u4e9c\u7a2e\u304c\u516c\u958b\u3055\u308c\u3066\u304b\u3089\u307e\u3082\u306a\u304f\u3001HenBox\u306e\u65b0\u3057\u3044\u4e9c\u7a2e\u304c\u78ba\u8a8d\u3055\u308c\u3001\u305d\u308c\u3089\u306e\u4e00\u90e8\u3067\u306f\u3001\u6a19\u7684\u3068\u306a\u3063\u305f\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u6570\u304c\u6025\u5897\u3057\u307e\u3057\u305f\u3002\u88685\u306f\u3001AutoFocus\u3067\u78ba\u8a8d\u3055\u308c\u305f\u6700\u65b0\u306e\u4e9c\u7a2e\u306b\u3064\u3044\u3066\u8a18\u8f09\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>SHA256<\/b><\/td>\n<td><b>\u30d1\u30c3\u30b1\u30fc\u30b8\u540d<\/b><\/td>\n<td><b>\u30a2\u30d7\u30ea\u540d<\/b><\/td>\n<td><b>\u521d\u56de\u89b3\u6e2c\u6642\u671f<\/b><\/td>\n<\/tr>\n<tr>\n<td>07994c9f2eeeede199dd6b4e760fce3<\/p>\n<p>71f03f3cc4307e6551c18d2fbd024a24f<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd (Backup)<\/td>\n<td>2018\u5e741\u67083\u65e5<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><i>\u88685 \u6a5f\u80fd\u304c\u66f4\u65b0\u3055\u308c\u305f\u6700\u65b0\u306eHenBox\u4e9c\u7a2e<\/i><\/p>\n<p>\u88686\u306f\u3001\u30c7\u30fc\u30bf\u53ce\u96c6\u306e\u53ef\u80fd\u306a\u3001\u3053\u306e\u65b0\u3057\u3044HenBox\u306e\u4e9c\u7a2e\u3067\u3042\u308a\u3001\u6a19\u7684\u3068\u306a\u3063\u305f\u30a2\u30d7\u30ea\u306e\u6700\u65b0\u30ea\u30b9\u30c8\u3067\u3059\u3002\u8208\u5473\u6df1\u3044\u3053\u3068\u306b\u3001\u88683\u3067\u30ea\u30b9\u30c8\u3057\u305fHenBox\u4e9c\u7a2e\u3067\u6a19\u7684\u3068\u306a\u3063\u305f\u524d\u8ff0\u306e2\u3064\u306e\u901a\u4fe1\u30a2\u30d7\u30ea\u306f\u3001\u6700\u65b0\u306e\u30ea\u30b9\u30c8\u306b\u306f\u898b\u5f53\u305f\u308a\u307e\u305b\u3093\u3002<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>\u30d1\u30c3\u30b1\u30fc\u30b8\u540d<\/b><\/td>\n<td><b>\u30a2\u30d7\u30ea\u540d<\/b><\/td>\n<\/tr>\n<tr>\n<td>com.whatsapp<\/td>\n<td>WhatsApp Messenger<\/td>\n<\/tr>\n<tr>\n<td>com.pugna.magiccall<\/td>\n<td>n\/a<\/td>\n<\/tr>\n<tr>\n<td>org.telegram.messenger<\/td>\n<td>Telegram<\/td>\n<\/tr>\n<tr>\n<td>com.facebook.katana<\/td>\n<td>Facebook<\/td>\n<\/tr>\n<tr>\n<td>com.twitter.android<\/td>\n<td>Twitter<\/td>\n<\/tr>\n<tr>\n<td>jp.naver.line.android<\/td>\n<td>LINE: \u7121\u6599\u901a\u8a71&amp;\u30e1\u30c3\u30bb\u30fc\u30b8<\/td>\n<\/tr>\n<tr>\n<td>com.instanza.cocovoice<\/td>\n<td>Coco<\/td>\n<\/tr>\n<tr>\n<td>com.beetalk<\/td>\n<td>BeeTalk<\/td>\n<\/tr>\n<tr>\n<td>com.gtomato.talkbox<\/td>\n<td>TalkBox Voice Messenger - PTT<\/td>\n<\/tr>\n<tr>\n<td>com.viber.voip<\/td>\n<td>Viber Messenger<\/td>\n<\/tr>\n<tr>\n<td>com.immomo.momo<\/td>\n<td>MOMO\u964c\u964c<\/td>\n<\/tr>\n<tr>\n<td>com.facebook.orca<\/td>\n<td>Messenger \u2013 \u7121\u6599\u306e\u30c6\u30ad\u30b9\u30c8\u304a\u3088\u3073\u30d3\u30c7\u30aa \u30c1\u30e3\u30c3\u30c8<\/td>\n<\/tr>\n<tr>\n<td>com.skype.rover<\/td>\n<td>Skype(\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3 \u30b9\u30c8\u30a2\u306e\u307f)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><i>\u8868 6 \u65b0\u3057\u3044HenBox\u4e9c\u7a2e\u306e\u6a19\u7684\u30a2\u30d7\u30ea<\/i><\/p>\n<p>\u3053\u308c\u3089\u306e\u30a2\u30d7\u30ea\u306e\u591a\u304f\u306f\u3001\u9069\u5207\u306b\u69cb\u7bc9\u3055\u308c\u3001Google Play\u3067\u5165\u624b\u53ef\u80fd\u3067\u3059\u304c\u3001com.skype.rover\u306f\u3001\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3 \u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u3067\u306e\u307f\u5165\u624b\u53ef\u80fd\u306a\u3088\u3046\u3067\u3059\u3002com.pugna.magiccall\u306b\u3064\u3044\u3066\u3082\u540c\u69d8\u3068\u601d\u308f\u308c\u307e\u3059\u304c\u3001\u73fe\u5728\u306e\u3068\u3053\u308d\u78ba\u304b\u306a\u3053\u3068\u306f\u8a00\u3048\u307e\u305b\u3093\u3002<\/p>\n<p>\u660e\u3089\u304b\u306a\u306e\u306f\u3001HenBox\u306e\u6a5f\u80fd\u306f\u3001\u30cd\u30a4\u30c6\u30a3\u30d6 \u30e9\u30a4\u30d6\u30e9\u30ea\u3092\u6301\u3064Android\u30a2\u30d7\u30ea\u3068\u3044\u3046\u9762\u3067\u3082\u3001\u88ab\u5bb3\u8005\u304b\u3089\u53ce\u96c6\u53ef\u80fd\u306a\u30c7\u30fc\u30bf\u306e\u91cf\u3068\u3044\u3046\u9762\u3067\u3082\u975e\u5e38\u306b\u5305\u62ec\u7684\u3067\u3042\u308b\u3068\u3044\u3046\u3053\u3068\u3067\u3059\u3002\u3053\u306e\u30c7\u30fc\u30bf\u306b\u306f\u3001\u9023\u7d61\u5148\u304a\u3088\u3073\u4f4d\u7f6e\u306e\u60c5\u5831\u3001\u96fb\u8a71\u3001\u30e1\u30c3\u30bb\u30fc\u30b8\u306e\u6d3b\u52d5\u304c\u542b\u307e\u308c\u3001\u3055\u3089\u306b\u30de\u30a4\u30af\u3001\u30ab\u30e1\u30e9\u3001\u305d\u306e\u4ed6\u306e\u30bb\u30f3\u30b5\u30fc\u304b\u3089\u8a18\u9332\u3059\u308b\u6a5f\u80fd\u3001\u591a\u6570\u306e\u4e00\u822c\u7684\u306a\u30e1\u30c3\u30bb\u30fc\u30b8\u30f3\u30b0\u304a\u3088\u3073\u30bd\u30fc\u30b7\u30e3\u30eb \u30e1\u30c7\u30a3\u30a2 \u30a2\u30d7\u30ea\u304b\u3089\u306e\u30c7\u30fc\u30bf\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u6a5f\u80fd\u3092\u4fdd\u6709\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<h2>\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3<\/h2>\n<p>HenBox\u3092\u8abf\u67fb\u3059\u308b\u4e2d\u3067\u3001\u5f0a\u793e\u306f\u3001\u3053\u306e\u30de\u30eb\u30a6\u30a7\u30a2\u3068\u3001Windows\u30e6\u30fc\u30b6\u30fc\u306b\u5bfe\u3059\u308b\u6a19\u7684\u578b\u653b\u6483\u306b\u95a2\u9023\u3057\u305f\u4ed6\u306e\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3068\u306e\u30a4\u30f3\u30d5\u30e9\u306e\u3064\u306a\u304c\u308a\u3092\u767a\u898b\u3057\u307e\u3057\u305f\u3002\u7279\u306b\u3001PlugX\u3001Zupdax\u30019002\u3001Poison Ivy\u3068\u306e\u91cd\u8907\u306f\u6ce8\u76ee\u306b\u5024\u3057\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u3064\u306a\u304c\u308a\u3092\u5168\u4f53\u7684\u306b\u8868\u3057\u305f\u30a4\u30e1\u30fc\u30b8\u304c\u4ee5\u4e0b\u306e\u56f34\u3067\u3001\u30c4\u30fc\u30eb\u30dc\u30c3\u30af\u30b9\u5185\u306e\u5c11\u306a\u304f\u3068\u30825\u3064\u306e\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u304c\u3001\u5c11\u306a\u304f\u3068\u30822015\u5e74\u307e\u3067\u9061\u308b\u653b\u6483\u3067\u3042\u308b\u3053\u3068\u3092\u793a\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<figure id=\"attachment_67492\" aria-describedby=\"caption-attachment-67492\" style=\"width: 600px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_5.png\" rel=\"wpdevart_lightbox\"><img  class=\"wp-image-67492 lozad\"  data-src=\"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_5.png\" alt=\"\u56f34.HenBox\u304a\u3088\u3073\u95a2\u9023\u3057\u305f\u30de\u30eb\u30a6\u30a7\u30a2\u3068C2\" width=\"600\" height=\"294\" srcset=\"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_5.png 973w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_5-900x441.png 900w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_5-300x147.png 300w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_5-768x377.png 768w, https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/03\/henbox_5-370x181.png 370w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><figcaption id=\"caption-attachment-67492\" class=\"wp-caption-text\">\u56f34.HenBox\u304a\u3088\u3073\u95a2\u9023\u3057\u305f\u30de\u30eb\u30a6\u30a7\u30a2\u3068C2<\/figcaption><\/figure>\n<p>Unit 42\u304c\u78ba\u8a8d\u3057\u305f\u3001HenBox\u30689002\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u9593\u306e\u91cd\u8907\u306b\u306f\u3001\u3044\u304f\u3064\u304b\u306e\u30b5\u30f3\u30d7\u30eb\u306b\u304a\u3051\u308b3\u3064\u306e\u5171\u6709C2\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002\u4ee5\u4e0b\u306e\u6700\u521d\u306eIP\u306f\u3001\u3053\u3053\u307e\u3067\u78ba\u8a8d\u3055\u308c\u305fHenBox\u30b5\u30f3\u30d7\u30eb\u306e\u534a\u5206\u4ee5\u4e0a\u3067\u4f7f\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li>47.90.81[.]23<\/li>\n<li>222.139.212[.]16<\/li>\n<li>lala513.gicp[.]net<\/li>\n<\/ul>\n<p>Henbox\u3001PlugX\u3001Zupdax\u3001Poison Ivy\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u9593\u306e\u91cd\u8907\u306f\u3001\u4ee5\u4e0b\u306b\u793a\u3059\u5171\u6709C2\u306eWeb\u304a\u3088\u3073IP\u89e3\u6c7a\u3067\u3059\u3002<\/p>\n<ul>\n<li>59.188.196[.]172<\/li>\n<li>cdncool[.]com (\u304a\u3088\u3073\u3053\u306e\u30c9\u30e1\u30a4\u30f3\u306e3\u756a\u76ee\u306e\u30ec\u30d9\u30eb)<\/li>\n<li>www3.mefound[.]com<\/li>\n<li>www5.zyns[.]com<\/li>\n<li>w3.changeip[.]org<\/li>\n<\/ul>\n<p>\u524d\u306e\u6d3b\u52d5\u3068\u306e\u3064\u306a\u304c\u308a<\/p>\n<p>cdncool[.]com\u306e\u767b\u9332\u8005\u306f\u3001\u4ed6\u306b6\u3064\u306e\u30c9\u30e1\u30a4\u30f3\u3082\u767b\u9332\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u307e\u3067\u3001Unit 42\u306f\u30017\u3064\u306e\u3046\u30614\u3064\u304c\u60aa\u610f\u306e\u3042\u308b\u6d3b\u52d5\u3067\u4f7f\u7528\u3055\u308c\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u3044\u307e\u3059(\u4ee5\u4e0b\u306e\u30ea\u30b9\u30c8\u306e\u6700\u521d\u306e3\u3064\u3068cdncool[.]com)\u3002\u6b8b\u308a\u306e3\u3064\u3082\u540c\u3058\u76ee\u7684\u3067\u6a5f\u80fd\u3059\u308b\u3001\u3042\u308b\u3044\u306f\u6a5f\u80fd\u3057\u305f\u3068\u8003\u3048\u308b\u306e\u304c\u59a5\u5f53\u3067\u3059\u3002<\/p>\n<ul>\n<li>tcpdo[.]net<\/li>\n<li>adminsysteminfo[.]com<\/li>\n<li>md5c[.]net<\/li>\n<li>linkdatax[.]com<\/li>\n<li>csip6[.]biz<\/li>\n<li>adminloader[.]com<\/li>\n<\/ul>\n<p>Unit 42\u306f\u30012016\u5e747\u6708\u306e<a href=\"https:\/\/unit42.paloaltonetworks.jp\/unit-42-attack-delivers-9002-trojan-through-google-drive\/\">\u30d6\u30ed\u30b0<\/a>\u3067\u30019002\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u3001\u77ed\u7e2e\u3055\u308c\u305f\u30ea\u30f3\u30af\u3068Google Drive\u3067\u30db\u30b9\u30c8\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u7d44\u307f\u5408\u308f\u305b\u3066\u4f7f\u7528\u3057\u3001\u914d\u4fe1\u3055\u308c\u305f\u3053\u3068\u306b\u3064\u3044\u3066\u516c\u958b\u3057\u3066\u3044\u307e\u3059\u3002\u30b9\u30d4\u30a2 \u30d5\u30a3\u30c3\u30b7\u30f3\u30b0 \u30e1\u30fc\u30eb\u306b\u306f\u3001\u30df\u30e3\u30f3\u30de\u30fc\u306e\u653f\u6cbb\u3092\u30c6\u30fc\u30de\u306b\u3057\u305f\u30eb\u30a2\u30fc(\u308f\u306a)\u304c\u542b\u307e\u308c\u3066\u304a\u308a\u3001\u3053\u306e9002 C2\u30b5\u30fc\u30d0\u30fc\u304c\u5fdc\u7b54\u3057\u305f\u5834\u5408\u306b\u3001\u3053\u306e\u30c8\u30ed\u30a4\u306e\u6728\u99ac\u306f\u3001jackhex\u3068\u3044\u3046\u6587\u5b57\u5217\u3068\u4e00\u7dd2\u306b\u30b7\u30b9\u30c6\u30e0\u56fa\u6709\u60c5\u5831\u3092\u9001\u4fe1\u3057\u3066\u3044\u307e\u3057\u305f\u3002jackhex\u306f\u3001\u4ee5\u4e0b\u306b\u8a73\u7d30\u3092\u793a\u3057\u305fPoison Ivy\u6d3b\u52d5\u95a2\u9023\u3068\u601d\u308f\u308c\u308bC2\u306e\u4e00\u90e8\u3067\u3082\u3042\u308a\u3001\u4ed6\u306b\u30a4\u30f3\u30d5\u30e9\u306e\u3064\u306a\u304c\u308a\u3082\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>\u524d\u8ff0\u306e9002\u30b5\u30f3\u30d7\u30eb\u306eC2\u306f\u3001logitechwkgame[.]com\u3067\u3042\u308a\u3001\u3053\u308c\u306fIP\u30a2\u30c9\u30ec\u30b9\u3001222.239.91[.]30\u306b\u89e3\u6c7a\u3055\u308c\u307e\u3057\u305f\u3002\u540c\u6642\u306b\u3001\u30c9\u30e1\u30a4\u30f3\u3001admin.nslookupdns[.]com\u3082\u3001\u540c\u3058IP\u30a2\u30c9\u30ec\u30b9\u306b\u89e3\u6c7a\u3055\u308c\u307e\u3057\u305f\u3002\u3053\u308c\u306f\u3001\u3053\u308c\u3089\u306e2\u3064\u306e\u30c9\u30e1\u30a4\u30f3\u304c\u540c\u3058\u653b\u6483\u8005\u306b\u95a2\u308f\u3063\u3066\u3044\u308b\u3053\u3068\u3092\u793a\u5506\u3057\u3066\u3044\u307e\u3059\u3002\u307e\u305f\u3001admin.nslookupdns[.]com\u306f\u30012016\u5e744\u6708\u306bArbor Networks\u304c\u516c\u958b\u3057\u305f<a href=\"https:\/\/www.arbornetworks.com\/blog\/asert\/recent-poison-iv\/\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3:\u30d6\u30ed\u30b0\">\u30d6\u30ed\u30b0<\/a>\u3067\u8b70\u8ad6\u3055\u308c\u305f\u3001\u30df\u30e3\u30f3\u30de\u30fc\u304a\u3088\u3073\u305d\u306e\u4ed6\u306e\u30a2\u30b8\u30a2\u8af8\u56fd\u3078\u306e\u653b\u6483\u306b\u95a2\u9023\u3057\u305fPoison Ivy\u30b5\u30f3\u30d7\u30eb\u306eC2\u3067\u3057\u305f\u3002\u6d3b\u52d5\u9593\u306e\u3082\u3046\uff11\u3064\u306e\u3064\u306a\u304c\u308a\u306f\u3001C2 jackhex.md5c[.]net\u3067\u3059\u3002\u3053\u308c\u3082\u3001Arbor Networks\u306e\u30d6\u30ed\u30b0\u3067Poison Ivy C2\u3068\u3057\u3066\u4f7f\u7528\u3055\u308c\u307e\u3057\u305f\u3002jackhex\u306f\u3001\u4e00\u822c\u7684\u306a\u8a9e\u53e5\u3084\u6587\u7bc0\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u524d\u8ff0\u3057\u305f\u3088\u3046\u306b\u3001\u524d\u3067\u8b70\u8ad6\u3057\u305f9002\u30b5\u30f3\u30d7\u30eb\u306e\u30d3\u30fc\u30b3\u30f3\u6d3b\u52d5\u3067\u3082\u78ba\u8a8d\u3055\u308c\u307e\u3057\u305f\u3002\u6700\u5f8c\u306b\u30019002\u30d6\u30ed\u30b0\u3092\u516c\u958b\u3057\u3066\u4ee5\u964d\u3001Unit 42\u3082\u3001\u524d\u8ff0\u306e9002 C2\u304c\u3001\u30df\u30e3\u30f3\u30de\u30fc\u306e\u653f\u6cbb\u30c6\u30fc\u30de\u306e\u30eb\u30a2\u30fc\u3068\u4e00\u7dd2\u306b\u3001Poison Ivy C2\u3068\u3057\u3066\u4f7f\u7528\u3055\u308c\u3066\u3044\u308b\u306e\u3092\u78ba\u8a8d\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>\u5f0a\u793e\u306e9002\u30d6\u30ed\u30b0\u3067\u306f\u3001\u3044\u304f\u3064\u304b\u306e\u8ffd\u52a0\u30a4\u30f3\u30d5\u30e9\u304c\u95a2\u9023\u306ePoison Ivy\u30b5\u30f3\u30d7\u30eb\u7528\u306eC2\u3068\u3057\u3066\u4f7f\u7528\u3055\u308c\u305f\u3053\u3068\u3001\u3042\u308b\u3044\u306f\u305d\u308c\u3089\u306eC2\u30c9\u30e1\u30a4\u30f3\u3068\u306e\u30c9\u30e1\u30a4\u30f3\u767b\u9332\u8005\u304c\u91cd\u8907\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u6307\u6458\u3057\u3066\u3044\u307e\u3059\u3002\u5f0a\u793e\u304c\u305d\u306e\u30d6\u30ed\u30b0\u3092\u516c\u958b\u3057\u305f\u3068\u304d\u3001Unit 42\u306f\u30013\u3064\u306e\u767b\u9332\u8005\u306e\u3044\u305a\u308c\u306e\u91cd\u8907\u30c9\u30e1\u30a4\u30f3\u3082\u60aa\u610f\u306e\u3042\u308b\u6d3b\u52d5\u3067\u4f7f\u7528\u3055\u308c\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002\u4ee5\u964d\u3001\u5f0a\u793e\u306f\u30013\u3064\u76ee\u306e\u30ec\u30d9\u30eb\u306equerlyurl[.]com\u3092\u4f7f\u7528\u3057\u305fPoison Ivy\u30b5\u30f3\u30d7\u30eb\u3092\u89b3\u6e2c\u3057\u3066\u3044\u307e\u3059\u3002\u3055\u3089\u306b\u4fe1\u7528\u3067\u304d\u308b\u6750\u6599\u3068\u3057\u3066\u3001\u6b8b\u308a\u306e2\u3064\u306e\u30c9\u30e1\u30a4\u30f3\u3067\u3042\u308b\u3001gooledriveservice[.]com\u304a\u3088\u3073appupdatemoremagic[.]com\u304c\u60aa\u610f\u306e\u3042\u308b\u7528\u9014\u3067\u4f7f\u7528\u3055\u308c\u305f\u3001\u3042\u308b\u3044\u306f\u73fe\u5728\u3082\u4f7f\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u3066\u3044\u307e\u3059\u3002\u00a0 \u5b8c\u5168\u306b\u7d5e\u308a\u8fbc\u3081\u3066\u306f\u3044\u307e\u305b\u3093\u304c\u3001\u3053\u308c\u3089\u306ePoison Ivy\u30b5\u30f3\u30d7\u30eb\u306b\u95a2\u9023\u3057\u305f\u60c5\u5831\u3001\u3044\u304f\u3064\u304b\u306e\u304a\u3068\u308a\u306e\u30d5\u30a1\u30a4\u30eb\u306f\u4e2d\u56fd\u8a9e\u3067\u4f5c\u6210\u3055\u308c\u3066\u304a\u308a\u3001\u53f0\u6e7e\u306e\u7d44\u7e54\u3092\u6a19\u7684\u306b\u3001\u653f\u6cbb\u7684\u30c6\u30fc\u30de\u3092\u30eb\u30a2\u30fc\u3068\u3057\u3066\u4f7f\u7528\u3057\u305f2016\u5e74\u306e\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u306e\u4e00\u90e8\u3068\u601d\u308f\u308c\u307e\u3059\u3002<\/p>\n<h2>\u7d50\u8ad6<\/h2>\n<p>HenBox\u306f\u901a\u5e38\u3001\u6b63\u898f\u306eAndroid\u30b7\u30b9\u30c6\u30e0 \u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3057\u3001\u5834\u5408\u306b\u3088\u3063\u3066\u306f\u305d\u308c\u3089\u306e\u5185\u90e8\u306b\u6b63\u898f\u30a2\u30d7\u30ea\u3092\u7d44\u307f\u8fbc\u307f\u307e\u3059\u3002\u60aa\u610f\u306e\u3042\u308bHenBox\u306e\u4e3b\u8981\u306a\u76ee\u7684\u306f\u3001\u3053\u306e\u30a2\u30d7\u30ea\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u30e6\u30fc\u30b6\u30fc\u3092\u306e\u305e\u304d\u898b\u3059\u308b\u3053\u3068\u3068\u601d\u308f\u308c\u307e\u3059\u3002\u30a2\u30a4\u30b3\u30f3\u56f3\u5f62\u306e\u6a21\u5023\u3084\u30a2\u30d7\u30ea\u3001\u30d1\u30c3\u30b1\u30fc\u30b8\u540d\u306a\u3069\u306e\u624b\u53e3\u3092\u4f7f\u7528\u3057\u3066\u3001\u88ab\u5bb3\u8005\u3092\u30bd\u30fc\u30b7\u30e3\u30eb \u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u3092\u5229\u7528\u3057\u3066\u3060\u307e\u3057\u3001\u60aa\u610f\u306e\u3042\u308b\u30a2\u30d7\u30ea\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u305b\u307e\u3059\u3002\u7279\u306b\u3044\u308f\u3086\u308b\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3 \u30a2\u30d7\u30ea \u30b9\u30c8\u30a2(Google Play\u4ee5\u5916)\u3092\u6d3b\u7528\u3057\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30b9\u30c8\u30a2\u306f\u591a\u304f\u306e\u5834\u5408\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304c\u52a3\u308a\u3001\u30db\u30b9\u30c8\u3059\u308b\u30a2\u30d7\u30ea\u306e\u691c\u67fb\u624b\u9806\u3082\u8ca7\u5f31\u3067\u3059\u3002\u4ed6\u306eAndroid\u30de\u30eb\u30a6\u30a7\u30a2\u3068\u540c\u69d8\u306b\u3001\u4e00\u90e8\u306e\u30a2\u30d7\u30ea\u306f\u30d5\u30a9\u30fc\u30e9\u30e0\u3001\u30d5\u30a1\u30a4\u30eb\u5171\u6709\u30b5\u30a4\u30c8\u3067\u3082\u5165\u624b\u53ef\u80fd\u3067\u3001\u96fb\u5b50\u30e1\u30fc\u30eb\u306e\u6dfb\u4ed8\u30d5\u30a1\u30a4\u30eb\u3068\u3057\u3066\u88ab\u5bb3\u8005\u306b\u9001\u4fe1\u3055\u308c\u308b\u5834\u5408\u3082\u3042\u308a\u307e\u3059\u3002\u5f0a\u793e\u306f\u3001\u3053\u308c\u307e\u3067\u78ba\u8a8d\u3067\u304d\u305f\u5c11\u6570\u306e\u30a2\u30d7\u30ea\u306b\u3064\u3044\u3066\u3057\u304b\u3001\u914d\u4fe1\u30e1\u30ab\u30cb\u30ba\u30e0\u3092\u5224\u5225\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n<p>\u3044\u304f\u3064\u304b\u306eHenBox\u30b5\u30f3\u30d7\u30eb\u3067\u78ba\u8a8d\u3055\u308c\u305f\u30db\u30b9\u30c8\u306e\u5834\u6240\u3001\u57cb\u3081\u8fbc\u307f\u30a2\u30d7\u30ea\u306e\u7279\u6027(\u904e\u6fc0\u6d3e\u30b0\u30eb\u30fc\u30d7\u3001VPN\u307e\u305f\u306f\u4ed6\u306e\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u6709\u52b9\u5316\u30a2\u30d7\u30ea\u3092\u4f7f\u7528\u3059\u308b\u30e6\u30fc\u30b6\u30fc\u3001\u30a6\u30a4\u30b0\u30eb\u8a9e\u3092\u8a71\u3059\u30e6\u30fc\u30b6\u30fc\u3092\u6a19\u7684\u3068\u3057\u3066\u3044\u308b\u3053\u3068)\u304b\u3089\u3001\u653b\u6483\u8005\u304c\u5bfe\u8c61\u3068\u3057\u3066\u3044\u308b\u88ab\u5bb3\u8005\u306e\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u3092\u63a8\u5b9a\u3067\u304d\u307e\u3059\u3002HenBox\u306e\u6a19\u7684\u304a\u3088\u3073\u6a5f\u80fd\u3001\u3044\u304f\u3064\u304b\u306e\u6771\u5357\u30a2\u30b8\u30a2\u8af8\u56fd\u3092\u6a19\u7684\u306b\u3001\u653f\u6cbb\u7684\u30c6\u30fc\u30de\u306e\u30eb\u30a2\u30fc\u3092\u4f7f\u7528\u3057\u305f4\u3064\u306eWindows\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3092\u4f7f\u7528\u3057\u305f\u4ee5\u524d\u306e\u6d3b\u52d5\u3068\u306e\u3064\u306a\u304c\u308a\u304b\u3089\u3001\u3053\u306e\u6d3b\u52d5\u304c\u5c11\u306a\u304f\u3068\u30823\u5e74\u524d\u306b\u9061\u308b\u8adc\u5831\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u3067\u3042\u308b\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n<p>Palo Alto Networks\u306e\u304a\u5ba2\u69d8\u306f\u3001\u4ee5\u4e0b\u306e\u88fd\u54c1\u306b\u3088\u3063\u3066\u4fdd\u8b77\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>AutoFocus\u3092\u3054\u4f7f\u7528\u306e\u304a\u5ba2\u69d8\u306f\u3001\u4ee5\u4e0b\u306e\u30bf\u30b0\u3067\u3001\u3053\u306e\u6d3b\u52d5\u3092\u8abf\u3079\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3053\u308c\u307e\u3067\u5f0a\u793e\u306fHenBox\u304c\u5171\u6709\u30c4\u30fc\u30eb\u3067\u306a\u3044\u3068\u8003\u3048\u3066\u3044\u307e\u3057\u305f\u3002\u3057\u304b\u3057\u3001\u3053\u308c\u3089\u306e\u653b\u6483\u8005\u304c\u4f7f\u7528\u3059\u308b\u4ee5\u4e0b\u306e\u30de\u30eb\u30a6\u30a7\u30a2\u306f\u3001\u8907\u6570\u306e\u30b0\u30eb\u30fc\u30d7\u9593\u3067\u5171\u6709\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li><a href=\"https:\/\/autofocus.paloaltonetworks.com\/#\/tag\/Unit42.HenBox\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u7d50\u8ad6:henbox\">HenBox<\/a><\/li>\n<li><a href=\"https:\/\/autofocus.paloaltonetworks.com\/#\/tag\/Unit42.PoisonIvy\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u7d50\u8ad6:poison ivy\">Poison Ivy<\/a><\/li>\n<li><a href=\"https:\/\/autofocus.paloaltonetworks.com\/#\/tag\/Unit42.Zupdax\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u7d50\u8ad6:zupdax\">Zupdax<\/a><\/li>\n<li><a href=\"https:\/\/autofocus.paloaltonetworks.com\/#\/tag\/Unit42.9002\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u7d50\u8ad6:9002\">9002<\/a><\/li>\n<li><a href=\"https:\/\/autofocus.paloaltonetworks.com\/#\/tag\/Unit42.PlugX\" data-page-track=\"true\" data-page-track-value=\"company:unit42-henbox-chickens-come-home-roost: text:\u7d50\u8ad6:plugx\">PlugX<\/a><\/li>\n<\/ul>\n<h3>Android\u306e\u30a6\u30a4\u30eb\u30b9\u4e88\u9632\u7b56<\/h3>\n<p><b>\u66f4\u65b0:\u00a0<\/b>\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6e08\u307f\u30a2\u30d7\u30ea\u3092\u5e38\u306b\u6700\u65b0\u306b\u4fdd\u3061\u307e\u3059\u3002PC\u3067\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u3084\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3 \u30d5\u30a1\u30a4\u30eb\u306b\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3059\u308b\u3088\u3046\u306b\u3001\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u7528\u306b\u958b\u767a\u3055\u308c\u305fAndroid\u304a\u3088\u3073\u30a2\u30d7\u30ea\u3082\u3001Google\u304a\u3088\u3073\u30a2\u30d7\u30ea\u306e\u958b\u767a\u8005\u304b\u3089\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u3092\u53d7\u3051\u53d6\u3063\u3066\u3001\u8106\u5f31\u6027\u3092\u9664\u53bb\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u542b\u3080\u6a5f\u80fd\u306e\u6539\u5584\u3092\u884c\u3046\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n<p><b>\u30ec\u30d3\u30e5\u30fc:\u00a0<\/b>\u30a2\u30d7\u30ea\u6a29\u9650\u3092\u78ba\u8a8d\u3057\u3001\u30a2\u30d7\u30ea\u306b\u4f55\u304c\u3067\u304d\u308b\u304b\u3092\u628a\u63e1\u3057\u3066\u304a\u304d\u307e\u3059\u3002\u3053\u308c\u306f\u82e5\u5e72\u6280\u8853\u7684\u306a\u3053\u3068\u3067\u3059\u304c\u3001\u591a\u304f\u306e\u6a29\u9650\u306f\u76f4\u89b3\u7684\u306b\u547d\u540d\u3055\u308c\u3066\u3044\u3066\u3001\u9023\u7d61\u5148\u3084\u30e1\u30c3\u30bb\u30fc\u30b8\u3001\u307e\u305f\u306f\u30c7\u30d0\u30a4\u30b9\u306e\u30de\u30a4\u30af\u3084\u30ab\u30e1\u30e9\u306a\u3069\u306e\u30bb\u30f3\u30b5\u30fc\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3053\u3068\u3092\u610f\u56f3\u3057\u3066\u3044\u308b\u304b\u3069\u3046\u304b\u304c\u308f\u304b\u308a\u307e\u3059\u3002\u8aac\u660e\u3055\u308c\u3066\u3044\u308b\u6a5f\u80fd\u3068\u6bd4\u8f03\u3057\u3066\u3001\u6a29\u9650\u306e\u9650\u5ea6\u304c\u5927\u304d\u3059\u304e\u308b\u5834\u5408\u306f\u3001\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u306a\u3044\u3067\u304f\u3060\u3055\u3044\u3002\u307e\u305f\u3001\u30a2\u30d7\u30ea\u304a\u3088\u3073\u958b\u767a\u8005\u306e\u30ec\u30d3\u30e5\u30fc\u3092\u8aad\u3093\u3067\u3001\u4fe1\u983c\u6027\u3092\u8a55\u4fa1\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<p><b>\u907f\u3051\u308b\u3053\u3068:\u00a0<\/b>\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3 \u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u3002\u3053\u308c\u3089\u306b\u306f\u3001Google Play\u30a2\u30d7\u30ea \u30b9\u30c8\u30a2\u306e\u6709\u6599\u30a2\u30d7\u30ea\u306e\u6d77\u8cca\u7248\u304c\u3042\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002\u591a\u304f\u306e\u5834\u5408\u3001\u305d\u306e\u3088\u3046\u306a\u30a2\u30d7\u30ea\u306b\u306f\u597d\u307e\u3057\u304f\u306a\u3044\u6a5f\u80fd\u304c\u3042\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u6a5f\u5bc6\u30c7\u30fc\u30bf\u306b\u30a2\u30af\u30bb\u30b9\u3057\u305f\u308a\u3001\u60aa\u610f\u306e\u3042\u308b\u52d5\u4f5c\u3092\u5b9f\u884c\u3057\u305f\u308a\u3057\u307e\u3059\u3002\u307e\u305f\u3001\u53ef\u80fd\u3067\u3042\u308c\u3070\u30c7\u30d0\u30a4\u30b9\u306e\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3082\u907f\u3051\u3066\u304f\u3060\u3055\u3044\u3002\u30a2\u30d7\u30ea\u304c\u3053\u306e\u80fd\u529b\u3092\u8aa4\u7528\u3059\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p><a name=\"ioc\"><\/a><\/p>\n<h2>IOC<\/h2>\n<p>\u6700\u65b0\u306e\u30b5\u30f3\u30d7\u30eb:<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>sha256<\/b><\/td>\n<td><b>apk_package_name<\/b><\/td>\n<td><b>apk_app_name<\/b><\/td>\n<td><b>apk_app_name_en<\/b><\/td>\n<\/tr>\n<tr>\n<td>446734590904c5c44978e4646bbbc629d98236c16e29940b32100c1400aebc88<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>ea0786bfe145d8c763684a2fdf2eb878da29c1b6ae5aacd1a428c9ffead4bad8<\/td>\n<td>com.android.vivibox<\/td>\n<td>\u5907\u4efd\u670d\u52a1<\/td>\n<td>Backup service<\/td>\n<\/tr>\n<tr>\n<td>16bb6ff97999b838a40b66146ff4c39b9c95906f062c6fe1e3077e6e30171a4d<\/td>\n<td>com.android.vivibox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>0fa384198ae9550e008e97fa38e8a56c4398fc91e12eddba713966bfed107130<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>e835e4907c9ff07a3a8281530552eaed97d9dea5b182d24a8db56335bad5213d<\/td>\n<td>com.android.cicibox<\/td>\n<td>\u5907\u4efd\u670d\u52a1<\/td>\n<td>Backup service<\/td>\n<\/tr>\n<tr>\n<td>9192602e5a3488c322025991ca7abcbdc8f916e08f279004a94cec8eb9f220b4<\/td>\n<td>com.android.vivibox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>9b57ab06650a137a5962b85ca9ae719e9c3956d68938a6a2425dffe8d152941a<\/td>\n<td>com.android.webbox<\/td>\n<td>\u5907\u4efd\u670d\u52a1<\/td>\n<td>Backup service<\/td>\n<\/tr>\n<tr>\n<td>7bf0e70fb4ffca19880fecdeb7e7e5d0fb4681064a98c71056cbb29c80ed6119<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>51cfc1a658e63624706a6bb2ed2baa63c588e7ce499bd116a3d5752743fefb54<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>3417899195780c8186356d49bc53b600b3b0e49aae83d9aeb27e518b6964be04<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>f0fd8c5f4487df7592e5b7fa02f19f23d3ad43f5aaab84257cc560bf5ea76f1e<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a6c1da9559d72563848802ed14a7421515009c2a0ffb85aab74c6e42584c222d<\/td>\n<td>com.android.cicibox<\/td>\n<td>\u5907\u4efd\u670d\u52a1<\/td>\n<td>Backup service<\/td>\n<\/tr>\n<tr>\n<td>bf0ab0362ee39191587921b75ab92bf6da12e377dbfdf4f7a053c1217841bdfc<\/td>\n<td>com.android.vivibox<\/td>\n<td>\u5907\u4efd\u670d\u52a1<\/td>\n<td>Backup service<\/td>\n<\/tr>\n<tr>\n<td>f5abd5e7e325f16df3e96ff55a19ebf524f40f9ade76003355eb1d68bc084006<\/td>\n<td>com.android.vivibox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>201eca94a9e8023d021a2b4a1517c4e46cd01e3be323bc46660c1c6f42aa6abf<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>7b7887d4ad7cab0c53d6f8557bbdf616985f3434ba536a5683f6fba604151d04<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>4eb768b52b687de49c7da8845bbd7671e2e076fe64bf23596a409108ef3fbbbc<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a7cfae9b12542b293d8265770a10946d422736d6f716af17f7b963603e422c51<\/td>\n<td>com.jrzheng.supervpn.view<\/td>\n<td>SuperVPN<\/td>\n<td>SuperVPN<\/td>\n<\/tr>\n<tr>\n<td>3c2109adf469bfc6c320ac824355f97a2b0f5ff01891d1affcd1a5b017c97195<\/td>\n<td>com.android.webbox<\/td>\n<td>\u5907\u4efd\u670d\u52a1<\/td>\n<td>Backup service<\/td>\n<\/tr>\n<tr>\n<td>2a7e456d2700ba13af48efdcf1f699bf51b6901a3ba5c80c009aaaca86235e5d<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>3d525435cbd88b4f1f97e32e2c6accf7855f4cc576ecbd87ad05a05ddd2d2f79<\/td>\n<td>com.android.vivibox<\/td>\n<td>\u5907\u4efd\u670d\u52a1<\/td>\n<td>Backup service<\/td>\n<\/tr>\n<tr>\n<td>5a999904b2f03263a11bcc077ad179333b431fb9e6e8090f371d975ba188e55e<\/td>\n<td>com.android.cicibox<\/td>\n<td>\u5907\u4efd\u670d\u52a1<\/td>\n<td>Backup service<\/td>\n<\/tr>\n<tr>\n<td>4d1e37e5840e8a4d5ae0f60cf33c593f595af200fbf998c3af809fd0c225c475<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>3cce965887d4677069cb9160d7c7c122087a5f434e095a9f0848c3e838bca9f5<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>8095cf4f6aec1983bd9f81ca85c1b27415e200b315f757613afb4f0334c99f0b<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>b098be6fd1859ee70ef123c59d5e2a1db435f990c9378b41af0c005f76ba24f2<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>56c1e23b12e83573440019084b9ce39f8f5ddd9d6de51edaf1f83e020fc648a0<\/td>\n<td>com.android.cicibox<\/td>\n<td>\u5907\u4efd\u670d\u52a1<\/td>\n<td>Backup service<\/td>\n<\/tr>\n<tr>\n<td>75fef2a0f05ae2ad971b01041fd3ed5ceacce306d78930bc2eba190c39799bc7<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a3deca8203792d4b34242e8f5d0f7e2e3d054f08d74885ab7ff6f3a6f4b2578a<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>77b6e8cd1e6de9ee22bf0e9d735089ae24134ab955f0975d4febc9ed6b60af38<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>9f8909b1615aaa0fed38ad27162ccf3437e2eaa59cb0c990261c866f075c4113<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>7ffc1afd5749e7731f4161a6348205555e5892f1bd3446b6d0c5e7bbaa5917e3<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a1644194faac76a1d49fd96b875a3f9026993e9f21f6dbc50dc59aeb5e7dac4b<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>2e4aa7777ba449071b90c0c13b803ddf6c6f10576eb9806acde6c3d1391db463<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>af2d44e36cc28727e29b0d9aecb4b17534a195faacbf4192ce1483a9bde65edc<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>5010236b481d8d2ebc45ee95154f10ffbb317eced86401486f63276520049896<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>8de4e886b69046c2942e26d8b2f436695ca27060f6a74c797c620502f87887c9<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>fed084773542120fe77b880fc136bd20979cddc286b75b651d01aa6e32234b2d<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>43ce0c3e63de64f032ea7d4ca77c4b40b86d57e1d237f771b21c1f9c8f41eafb<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>6e1812f7bf313552bc60b6be5b46bdfd44582775e3cb19cf6a231a903aec508b<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>7774432c67f3d3688a1a1b21edc0a73d9d47990cc1f132663b0010ff4bbd6e87<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>59ca2754279d9cba40334c35907e2e1fc6fd2888b2c180e5b0b8d73accbb40f2<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>2c5934db000a2838d42cf705453e29d16f4d4bb462fa65e134ce78b4266cefee<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>e326501a0fb15bf19ac135f501b84caa2587d1fb2cad9e034f1756898686dab4<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>14f715228acff7d8bad057e4bf996635d76ab41ae25ca8a3f90196caeb241446<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>2be931f008a9ea62aa35091eb9a5629824e81499ce7a5219101ccd39a02ecdec<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>51db059a833377666f92f64ae1e926b83da8821876c66949e320b55c1a929ff8<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>dee79253deaaa57af0fddb2c8ec5d4cc0546dfe3c1d05c2916a44a37eef3d9f8<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>ec2e060ac633978b9b700aa95784255b9796f4fb51c188b1c79d5947df07bf98<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a6c7351b09a733a1b3ff8a0901c5bdefdc3b566bfcedcdf5a338c3a97c9f249b<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>ae5598ccb3f2f31d2ec967808988a47d6ce4d1cd5e6808d1194ee93c6400039c<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>6f5e7f6ca2f25667d5fe55d7e8ec1b816d6db8b31cb28dff43b4f2f73d70ecdb<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>4cbb5a0d9b6f64dc9d8dd9aaac5651649e24b2cd7248eb9db32191102559ab9c<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>c375aad52c292b4d5c4efb02a33e2325a27f27158bb13c048f533a2a9d0837fb<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>779b09c61951818e5afb47c369fe9b5fa7b7f6139f589f14b3042b2ac96809d8<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>7ba216b88f84c9a0ce90ca5500ddc2e80100b23ef3784d133b69870768f1e3bc<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>077239b3bedaa850b82204fdd42e5e45fedc3dfc2f6da5aab04d768370e990fa<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>be548c26d0863b812948a16f982e96557319346fad897f67dc7873108203fdce<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>54366ee485b43cea10624d62247a48b12c1ce35c49295491f7fbb6323c68da7b<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>51714b8f34db94cbd8916374af4d8e63b56ef41fa819d2d697f1a3975a32960e<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>48f38b671847bfba3810b74d1d815c2bb4cc94392b98e1f59f95e748eb410465<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>d0e58c3e9d881f875532d1bb8bee63e4ac8728458708361f754db97fba6be22e<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>8b78f469f3eda0cb02cfbf5598f0a7449cb63b7181d7fd5037ebb9cb8aff30a4<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>49556e972a35c9d592bf64ab37056f6da356b2061c1ce269d9c3af73978756d9<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>1d4dadae0c696fde2fef99eb99188509dc0d5fbac7ee07d4f0d5a92dcc922ad7<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>3c62d00a9740c49cf01fb7635260ff71e0ac44cf80da749ca4101869120f2233<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>993692d5540c40614f4da430cf4cea64a7e0e7f950452abae19bf608afdf20a6<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>3e026154767b6a101d3a852946e9eb3ed1c96662490afe9b601469a8459e325b<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>6a518d29232d3f68aa5c78df4a8d212f924e03379dc2be0a388b3118779fe583<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>70512a566f33c636ad071d18e82db89f9531a6133be89b7d3f18fc9f7730b078<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>53238af90efd8531686432245c516db04cd163584a811d6e5835a42fe738fbab<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>2f2277898f34a91a365f1a090d72678768c5e420c8350f340cc4b4602cd8a710<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>b48edd2270b1aeb014291eb3ac2aaa1d4b7ee4694965d0de2c0978b2feae946d<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>45e7dc9c0e33d4754384365a60604c66d72356a994cbed8e8eab8796cf1579e2<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a1e465d905434d5dae3bb7acb7c148ef8ed0d341a6d9121d09adbc126cc3a907<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>4d437d1ac29b1762cc47f8094a05ab73141d03f9ce0256d200fc691c41d1b6e7<\/td>\n<td>cn.android.setting<\/td>\n<td>islamawazi<\/td>\n<td>islamawazi<\/td>\n<\/tr>\n<tr>\n<td>d29646f2c665ef91c360e24242c634ee9051d4ab01cb8f87265088e47f41d690<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>2345a56d61e052af3265ee0fae47b22f1551ede4eee45bca30ad5fb9fac7a922<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>44388ec38ee36177d6804d778ee554b2d063db3b88d7480eca6587ff68a15982<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>286bd20f3ea944703c8c87e66708d6b32046a640863afba7f3c4c72dc28d37d1<\/td>\n<td>cn.android.seting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>7f28caeaa484496f85c80580cd88671961149aae2295c8777becb2970455504c<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>89ef65813bccb8197da4af68ba8f9e8e123f3aad4ed41736f8039ad2c6817a25<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>1749df47cf37c09a92b6a56b64b136f15ec59c4f55ec835b1e569c88e1c6e684<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>5f16c23f92a10de59efc9a081e0c79458faa3fabb24a1356dbfff7cea8611a3e<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>66eec9ffa2906e56656e649d5b632526e829d7142a75cd27a006bf82775e8c45<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a728c653b9c7be4b058eff329afb826db755fdddc4e10ba67191816db7dbeac0<\/td>\n<td>cn.android.setting<\/td>\n<td>\u7231\u5947\u827a<\/td>\n<td>IQIYI<\/td>\n<\/tr>\n<tr>\n<td>c4ee98d58d38f6109d843955277f1a37bfb138a14113c6cb38bcb6eb857d4977<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>577ed81e07b62d9c363c505271d1f2a81592a69e1a60a82fbe8fff16e7d3419d<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>b8f785a6581bf438b1947e498b8f2255607440347d8f8b5cb31f3b98427330e6<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>5a3c44a6e8c8e02e69caa430f41ec80b94740d099bbcfbf39cf08280fc6e16bb<\/td>\n<td>com.android.henbox<\/td>\n<td>WJ VPN<\/td>\n<td>WJ VPN<\/td>\n<\/tr>\n<tr>\n<td>184e5cbebef4ee591351cfaa1130d57419f70eb95c6387cb8ec837bd2beb14d6<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>efa3cd45e576ef8ab22d40fc9814456d06a6eeeaeada829c16122a39cb101dbf<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>9d85be32b54398a14abe988d98386a38ce2d35fff91caf1be367f7e4b510b054<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a8ea1140a739b2aeeb838d7fe2c073cb834bce46db22071022bd181a59422af1<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>80a35bcbce326d05dd74ed05560db41a0f9471c4922fc9fe88d0b1a94c3cb1ae<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>0e31575bf0001d818d87aa134e728f62e7f2d27ff9437897303eb8ae1962a865<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>d3dd162e7dee6022826e7fef23cb84f17a948d2761013a09943f165f378197e0<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>3b345ffe7fac9aef0c9e0be3f01e8f9e1f3e0442849cc0e3f979b9866465b6bc<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>0a4f38a83abbbab3a039be95862df7848f28513baa1da52a74a9e6a31f63c9b7<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a267176bdc1779b19fde2e38f5f062478e8cf173582e38a26538512d64d85ecd<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>7603126f04e9e7cff828aabc060349d6dfbd76e795df7b0e798b3b0914ad13a0<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>1da0e30b4b2ad2626a3f069f0f50f81d29b789d41385db26d7c84da3af02cd1c<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>ddea532ef46abb9bfa77acdbd38155d9a92381f777fe4c797967203578aa0966<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a89bdb4fd54b9488fd6f2685a4dcfa1c106d4ac9f9fb8f8992e557e306184f1a<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>b0bbcee232f27a1b366f8a7ed1d2c3056f9a67fa70e42c1fa7cfb7c778df8cb5<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>bf16b9f012e1a0724f95a0e61a8748be3c9fc3fe3bb5a82bf3efd9b8211591fb<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>ad5a6b9ca0389c458dde73a456404634eec473cf5833914c7466af41e23b6ea9<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>a5d9efae12c9e5913156b5415581678748bdeed25a5767438afadc869d25e0d4<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>b5598c4a26f3b4a143a413c46935f0506afd7e400ecf4c6ca05595e83d8dc2c7<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>4f6173659e2c23835228f2e05daacecb618c099878d0028dd9a52b9682de2ac4<\/td>\n<td>cn.android.setting<\/td>\n<td>\u65e0\u79d8<\/td>\n<td>No secret<\/td>\n<\/tr>\n<tr>\n<td>7d8a47cda9367ee31ebf58dd226afc583b34a73476ed5ff1b2b3f2460cd4c339<\/td>\n<td>cn.android.setting<\/td>\n<td>uyhl<\/td>\n<td>uyhl<\/td>\n<\/tr>\n<tr>\n<td>b34b09d7b4bee3125ea9b27c128c4239c78d3be95d9d5dff73c68e479353db5b<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>b3413e09ceecc305187d08007ea86f654a451952807e37b8f2dcd14a8127042a<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>718bab91ba29791a494c31783b64ce1fe3d78bcdd6a6f909588e198fbea3b3cf<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>de9d1c68ef9df6dd72455f50d1cdffd76e24a501bbbaa3cacc4aedb74b2f743d<\/td>\n<td>cn.android.setting<\/td>\n<td>\u63a2\u63a2<\/td>\n<td>Explore<\/td>\n<\/tr>\n<tr>\n<td>55e65d1fba82a21b0ee52435be890279cf7ae747abba7f448a6547ba2ed9666e<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>801d54f829668487c2ed28dc56beb6f156a6100a3be12805e1104fb9f68f6a00<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>3ffa8ef36934420b08e4139385400da774f61cabe000557ff025af650f2964bb<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>8b4e60160089b6af71e3c555c4bdaa9344b76a5f0dfd1ecc3a6e8c23f0940b2a<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>b779a7a05c226a14c2f4bad1f22c493a2a9de8b988b01602fbe60d1f6dc2ba8c<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>4a8c5194183f2a5b593654a29213c6f705f083ddbbff10a0bb1e7695c66a0f89<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>775c2dbf6dd7423bd098b216bd6dcf11104e885e451fa95ae64dc18fb54a34c7<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>228d1c80a92641c6ba9c9d1e68146e9bb66f02605135c2603db3ace692cc05f2<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>4ecf03a1eaa0255340a41e48728be1d50dab724b72f9096a1f537fa578e76d17<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>8a28fed36cf0d8640c7086770614e33d3788200bc7b0b408873873cd17e31653<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>35b1f11a97dd5c05c87328e2ed4ae5776b84d3ce6cf4cdbc2faa1865dab2e09b<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>bb91d7bbea783bacd57a92691ebcbb449d9606f2f3bbb77538ec751a8b01d8a9<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>011509bb9cde31c0b45c49747ff150abcfa66d283ff986f167bf564bacfded4d<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>da6d75e996b0bafad782d87c809269ef5ccfa62c938039790333f0f2b4ecafe3<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>eb31fc24f727bc6f25b7a90dc86c127099384398b7182ae52d3fe23950e9ed8c<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>6d441e6b75fa0ea1880937d7c94dbd1caaa210915d386dfb5a01ca22fd813d28<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>c153ed3b2ae96cb2ec55294f89180302f89e9dbca6a192eec7bd4f3591b8252e<\/td>\n<td>cn.android.seting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>2510aa8736c5462e8784f1cf494716bb923f97645899c73c56ead1ff58b35499<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>0bfbbca56718b5bae7e21613a9884ea80db53aa1eca9cacf5a793e52f6a724e7<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>e9da842ccf4a681226577c26e2becea079080a4b6838171c06bb358db132bc5e<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>20fcff9826373d50abe813d3cb0272bf7b65617196cd4ac8d4646b8fd3256bea<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>0387baebb2b0c678e46e7291325e91118c53a3206d73c1145c082b10cf6a65f1<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>0efaf91842a7e45562e97bda369efa6e14f98bf9d63782ec9c323fa246da549a<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>cdbd4b98625c4766cbf72f69ce951faf49a13394ea85e7a23188e70a209609be<\/td>\n<td>cn.android.seting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>d4ef4bdea69a248f9792211c4d52882ad6262f7223fc1aa9f328abe50412669f<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>3db36dc3b21dbd0a9037cda21606d37c1a1dd493346e00e36231a252a14446d6<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>92c5fdf61b378e5252b0eb70a5cfd7af2d27c915aece48e32b9c2ba04a5fa5b3<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>740a54e1f89cb321d13396987fd26d52c6c66c49894283c6d9889156e063ecb3<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>7f76f102ab233528ce3cb111ae3b026cf16b3233c6bf3002de8a0daea3ebc0d7<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>153794e424eceaba48e28e7f3333ab0c9c7addeda1c5de7835b191f5f25e4e34<\/td>\n<td>com.android.henbox<\/td>\n<td>\u5907\u4efd<\/td>\n<td>Backup<\/td>\n<\/tr>\n<tr>\n<td>a1bf2f3fcac9d1aae94eb7a6dc37be00185e102e504032f4ffa391ddbd4bd353<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>444e73bd1020d08dc2901a041d675db1060815914024855daeddbc201e3ad4ee<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>f88c84156d8e9fdec6f5c400135277ecd03e4b1d95e7d3b6f5b8c8a77eeb055f<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>2782265ddd3a0d94d4f2622366b3401002dcfe1a9b99b7cbf6d5e824ff14d728<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>efff4243b6143c937509f52dbe7c4e40ceb2eb226f7cc1c96d8cf9f287668e37<\/td>\n<td>cn.android.setting<\/td>\n<td>\u8bbe\u7f6e<\/td>\n<td>Setup<\/td>\n<\/tr>\n<tr>\n<td>000473f7168ebda3de054a126352af81b61dd0be462ae9b3c7ccc0bc5cea7986<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>6f0de72ee2df4206102c1ff93955fef07cee84a1ba280ef3eda3db9a7eafb22e<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>2f7aa05b16d870d34feb1faa62bbfb9c5cffd4a52ea094c66657887b7c7046d4<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>198ff17259ad377fae62ca49daaed0d9313831d5a12b16a79dd54045eb6909b8<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>88c08e7084d4e0db14fc5fec6c906ff89e68b54df09096d49573b1906dd1ecd2<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>5fff623781636b2af95327293f246e0d83b90012f067a8c9e6c2b5869e606465<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>a26802ebe8ad4dc076becbc18b32a825cf057ff2059a0742ece86afe6fcb496c<\/td>\n<td>com.android.henbox<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>e0427ca401d68c347ef14f65a94735f76238f59710d99c4097e51da23cbb2a6d<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>cf36fb6f2d4029876f50d6a1eb9eafb13eb0bc6a57e179172ffe67a305f33c41<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>d68070f75341ce070b11a4ecda28d80a85303fa102fb4cb84c3dcbf97863bcc5<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>60adc526a1bfa8df150c25016d220544671a62820493b66a8467436181b8d224<\/td>\n<td>cn.android.setting<\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>0589bed1e3b3d6234c30061be3be1cc6685d786ab3a892a8d4dae8e2d7ed92f7<\/td>\n<td>com.android.henbox<\/td>\n<td>DroidVPN<\/td>\n<td>DroidVPN<\/td>\n<\/tr>\n<tr>\n<td>f28761f897e3a0e1dcdb0a993076a1cc48a1b17361d3f401aa917406332a79f1<\/td>\n<td><\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>fa5a76e86abb26e48af0b312f056d24000bc969835c40b3f98e5ca7e301b5bee<\/td>\n<td>com.android.henbox<\/td>\n<td>Uyghurche Kirguzguch<\/td>\n<td>Uyghurche Kirguzguch<\/td>\n<\/tr>\n<tr>\n<td>5808df07cedf15451ab0984e9c60b077602de258319d48cf88b0cc4ca7bb57a0<\/td>\n<td><\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>b0e0d35649d6e5405d051580d0c2a7ca5d3eb58f38bd51d0b8b7b98813256ea1<\/td>\n<td><\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>2db13b0cdede04b1b050744114e6c849e5e527b37bcd22984b265dff874dd411<\/td>\n<td><\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>c6117397a54a1c2fda6efe40b1a209c14834f9ecb82136e06174c16644a59657<\/td>\n<td><\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>ed35dab84aa4de72e782aef8cead90688d5c664de878207488828ed16902e828<\/td>\n<td><\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>2a7ab147d9e7c7f5349f5f929a2f955fb03b376d29d02d5a41d5e6da31d7cdcf<\/td>\n<td><\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<tr>\n<td>f3d04a7f77498acec86efc8d372c4d6eac591d8030f0a867ab856074e4da1fe6<\/td>\n<td><\/td>\n<td><\/td>\n<td>0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><b>Poison Ivy<\/b><\/p>\n<p><span style=\"font-family: 'courier new', courier, monospace;\">d3d5a43a2a4f054d41acf6d5f5c1d4d87c7027d880172c3167eaa19f99db43db<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">dfcff48fb7ad43940c46430a4cd28d52564ea9b6e40a23ff4324da919a5fb783<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">12759f7fd01ffdea97954be5404d7e43a3941a7388129e7b6ace85f56b500cd8<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">26c0349af2b5ffebd01d86eff16a0158bb3ceba9ecb04a0c0bd442bc5736328d<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">ac8fc264c7ec3cf70836e1bb21f9a20174b04ad49731b8797d7d8bb95cb353e2<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">3d714e1c02c4baf37008fb2537b02c0c1f524fa49263f3400f97f9ef12f2c907<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">58246d040c79c2a75729511f09b09ae709fbfbaa0bad6e72751a586f7b37ec5e<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">c9be192a5acfc3b416dbd3fa800fa63851b3440d4187961978b33cef21aeaaeb<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">98f16b65b8acd4610077edd92dcb090e3d97f427dbb621827096071ed333b7b4<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">7cdd37ef4a45afa1b85c87f2a778cf8a7482f7beeee5178856d2f4acfa841135<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">c9be192a5acfc3b416dbd3fa800fa63851b3440d4187961978b33cef21aeaaeb<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">14e2e6bbcc68650bfd7c1eb374401eb606c7417dfae7bebb4bf86909e2ff524d<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">6a5998faa2be7d8b44f23cd5e02c9e3fa4a22bdba32e4663780aa035bddef239<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">b45e4ac7a790a7c6364cd93e371e548756f621028380c850059954340c0f13dc<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">b82785a6d488798c43f9dba0dd3f6cf8a4b03b308203452f641456dde09bedd8<\/span><\/p>\n<p><b>PlugX<\/b><\/p>\n<p><span style=\"font-family: 'courier new', courier, monospace;\">45c64508382f41056bed1a6d95927225791fe8fcd8ee9a9a133968b93c19e39f<\/span><b>\u00a0<\/b><\/p>\n<p><b>9002<\/b><\/p>\n<p><span style=\"font-family: 'courier new', courier, monospace;\">b2966c2702285d2cad851bae72fe22136d7975a2a50b43a855447703146c63f0<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">1b168603010e5179d001f78e47176296776938dde2351ca2250f2977eff043d0<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">C11b963e2df167766e32b14fb05fd71409092092db93b310a953e1d0e9ec9bc3<\/span><\/p>\n<p><b>Zupdax<\/b><\/p>\n<p><span style=\"font-family: 'courier new', courier, monospace;\">ce0a078d12698cfca9c4a00dcb6cb2425956538f271e6a151a0e646677ed4ae9<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">ffc3f886d142c5df35b8eb1c2aee77e553a74657b6054e596e8347b4f0c0975e<\/span><\/p>\n<p><b>\u30c9\u30e1\u30a4\u30f3\u304a\u3088\u3073IP<\/b><\/p>\n<p><span style=\"font-family: 'courier new', courier, monospace;\">60.191.57[.]35<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">47.90.81[.]23<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">222.139.212[.]16<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">59.188.196[.]172<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">222.239.91[.]30<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">work.andphocen[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">andphocen[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">w3.ezua[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">lala513.gicp[.]net<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">logitechwkgame[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">www5.zyns[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">www3.mefound[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">w3.changeip[.]org<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">admin.nslookupdns[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">cdncool[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">dns.cdncool[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">tcpdo[.]net<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">3w.tcpdo[.]net<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">md5c[.]net<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">jackhex.md5c[.]net<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">up.outhmail[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">outhmail[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">queryurl[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">update.queryurl[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">re.queryurl[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">mail.queryurl[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">adminsysteminfo[.]com<\/span><br \/>\n<span style=\"font-family: 'courier new', courier, monospace;\">info.adminsysteminfo[.]com<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Unit 42 discovers HenBox, an Android Malware family masquerading as legitimate apps on third-party app stores.<\/p>\n","protected":false},"author":46,"featured_media":99566,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[4321,1974,4428],"tags":[7045,4909,6561,4651,7047,7048],"product_categories":[],"coauthors":[635,831,105,605],"class_list":["post-100051","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-threat-research","category-malware-ja","category-threat-research-ja","tag-9002-ja","tag-android-ja","tag-henbox-ja","tag-plugx-ja","tag-poison-ivy-ja","tag-zupdax"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.0 (Yoast SEO v27.0) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>HenBox: \u8607\u3063\u305f\u30ad\u30e3\u30f3\u30da\u30fc\u30f3<\/title>\n<meta name=\"description\" content=\"Unit 42\u304c\u6b63\u898fAndroid\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3059\u65b0\u3057\u3044Android\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3092\u767a\u898b\u3057\u300cHenBox\u300d\u3068\u547d\u540d\u3057\u307e\u3057\u305f\u3002\u6b63\u898f\u7248\u3092HenBox\u3068\u4e00\u7dd2\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u3092\u3060\u307e\u3059\u624b\u6cd5\u3092\u4f7f\u3044\u307e\u3059\u3002HenBox\u306e\u6a19\u7684\u306f\u4e3b\u306b\u30a6\u30a4\u30b0\u30eb\u65cf\u306e\u3088\u3046\u3067\u3059\u3002\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/\" \/>\n<meta property=\"og:locale\" content=\"ja_JP\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HenBox: \u8607\u3063\u305f\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\" \/>\n<meta property=\"og:description\" content=\"Unit 42\u304c\u6b63\u898fAndroid\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3059\u65b0\u3057\u3044Android\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3092\u767a\u898b\u3057\u300cHenBox\u300d\u3068\u547d\u540d\u3057\u307e\u3057\u305f\u3002\u6b63\u898f\u7248\u3092HenBox\u3068\u4e00\u7dd2\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u3092\u3060\u307e\u3059\u624b\u6cd5\u3092\u4f7f\u3044\u307e\u3059\u3002HenBox\u306e\u6a19\u7684\u306f\u4e3b\u306b\u30a6\u30a4\u30b0\u30eb\u65cf\u306e\u3088\u3046\u3067\u3059\u3002\" \/>\n<meta property=\"og:url\" content=\"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/\" \/>\n<meta property=\"og:site_name\" content=\"Unit 42\" \/>\n<meta property=\"article:published_time\" content=\"2018-03-13T13:00:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-03-31T01:03:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2019\/10\/unit42-blog-600x300.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Alex Hinchliffe, Mike Harbison, Jen Miller-Osborn, Tom Lancaster\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"HenBox: \u8607\u3063\u305f\u30ad\u30e3\u30f3\u30da\u30fc\u30f3\" \/>\n<meta name=\"twitter:description\" content=\"Unit 42\u304c\u6b63\u898fAndroid\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3059\u65b0\u3057\u3044Android\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3092\u767a\u898b\u3057\u300cHenBox\u300d\u3068\u547d\u540d\u3057\u307e\u3057\u305f\u3002\u6b63\u898f\u7248\u3092HenBox\u3068\u4e00\u7dd2\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u3092\u3060\u307e\u3059\u624b\u6cd5\u3092\u4f7f\u3044\u307e\u3059\u3002HenBox\u306e\u6a19\u7684\u306f\u4e3b\u306b\u30a6\u30a4\u30b0\u30eb\u65cf\u306e\u3088\u3046\u3067\u3059\u3002\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"HenBox: \u8607\u3063\u305f\u30ad\u30e3\u30f3\u30da\u30fc\u30f3","description":"Unit 42\u304c\u6b63\u898fAndroid\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3059\u65b0\u3057\u3044Android\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3092\u767a\u898b\u3057\u300cHenBox\u300d\u3068\u547d\u540d\u3057\u307e\u3057\u305f\u3002\u6b63\u898f\u7248\u3092HenBox\u3068\u4e00\u7dd2\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u3092\u3060\u307e\u3059\u624b\u6cd5\u3092\u4f7f\u3044\u307e\u3059\u3002HenBox\u306e\u6a19\u7684\u306f\u4e3b\u306b\u30a6\u30a4\u30b0\u30eb\u65cf\u306e\u3088\u3046\u3067\u3059\u3002","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/","og_locale":"ja_JP","og_type":"article","og_title":"HenBox: \u8607\u3063\u305f\u30ad\u30e3\u30f3\u30da\u30fc\u30f3","og_description":"Unit 42\u304c\u6b63\u898fAndroid\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3059\u65b0\u3057\u3044Android\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3092\u767a\u898b\u3057\u300cHenBox\u300d\u3068\u547d\u540d\u3057\u307e\u3057\u305f\u3002\u6b63\u898f\u7248\u3092HenBox\u3068\u4e00\u7dd2\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u3092\u3060\u307e\u3059\u624b\u6cd5\u3092\u4f7f\u3044\u307e\u3059\u3002HenBox\u306e\u6a19\u7684\u306f\u4e3b\u306b\u30a6\u30a4\u30b0\u30eb\u65cf\u306e\u3088\u3046\u3067\u3059\u3002","og_url":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/","og_site_name":"Unit 42","article_published_time":"2018-03-13T13:00:50+00:00","article_modified_time":"2020-03-31T01:03:47+00:00","og_image":[{"width":600,"height":300,"url":"https:\/\/unit42.paloaltonetworks.com\/wp-content\/uploads\/2019\/10\/unit42-blog-600x300.jpg","type":"image\/jpeg"}],"author":"Alex Hinchliffe, Mike Harbison, Jen Miller-Osborn, Tom Lancaster","twitter_card":"summary_large_image","twitter_title":"HenBox: \u8607\u3063\u305f\u30ad\u30e3\u30f3\u30da\u30fc\u30f3","twitter_description":"Unit 42\u304c\u6b63\u898fAndroid\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3059\u65b0\u3057\u3044Android\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3092\u767a\u898b\u3057\u300cHenBox\u300d\u3068\u547d\u540d\u3057\u307e\u3057\u305f\u3002\u6b63\u898f\u7248\u3092HenBox\u3068\u4e00\u7dd2\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u3092\u3060\u307e\u3059\u624b\u6cd5\u3092\u4f7f\u3044\u307e\u3059\u3002HenBox\u306e\u6a19\u7684\u306f\u4e3b\u306b\u30a6\u30a4\u30b0\u30eb\u65cf\u306e\u3088\u3046\u3067\u3059\u3002","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/#article","isPartOf":{"@id":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/"},"author":{"name":"Alex Hinchliffe","@id":"https:\/\/unit42.paloaltonetworks.com\/#\/schema\/person\/7d51f04a2afcca497cde7076d89d516f"},"headline":"HenBox: \u8607\u3063\u305f\u30ad\u30e3\u30f3\u30da\u30fc\u30f3","datePublished":"2018-03-13T13:00:50+00:00","dateModified":"2020-03-31T01:03:47+00:00","mainEntityOfPage":{"@id":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/"},"wordCount":4375,"commentCount":0,"image":{"@id":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/#primaryimage"},"thumbnailUrl":"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2019\/10\/unit42-blog-600x300.jpg","keywords":["9002","Android","HenBox","PlugX","Poison Ivy","Zupdax"],"articleSection":["Threat Research","\u30de\u30eb\u30a6\u30a7\u30a2","\u8105\u5a01\u30ea\u30b5\u30fc\u30c1"],"inLanguage":"ja","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/","url":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/","name":"HenBox: \u8607\u3063\u305f\u30ad\u30e3\u30f3\u30da\u30fc\u30f3","isPartOf":{"@id":"https:\/\/unit42.paloaltonetworks.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/#primaryimage"},"image":{"@id":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/#primaryimage"},"thumbnailUrl":"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2019\/10\/unit42-blog-600x300.jpg","datePublished":"2018-03-13T13:00:50+00:00","dateModified":"2020-03-31T01:03:47+00:00","author":{"@id":"https:\/\/unit42.paloaltonetworks.com\/#\/schema\/person\/7d51f04a2afcca497cde7076d89d516f"},"description":"Unit 42\u304c\u6b63\u898fAndroid\u30a2\u30d7\u30ea\u306b\u306a\u308a\u3059\u307e\u3059\u65b0\u3057\u3044Android\u30de\u30eb\u30a6\u30a7\u30a2 \u30d5\u30a1\u30df\u30ea\u3092\u767a\u898b\u3057\u300cHenBox\u300d\u3068\u547d\u540d\u3057\u307e\u3057\u305f\u3002\u6b63\u898f\u7248\u3092HenBox\u3068\u4e00\u7dd2\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u3092\u3060\u307e\u3059\u624b\u6cd5\u3092\u4f7f\u3044\u307e\u3059\u3002HenBox\u306e\u6a19\u7684\u306f\u4e3b\u306b\u30a6\u30a4\u30b0\u30eb\u65cf\u306e\u3088\u3046\u3067\u3059\u3002","breadcrumb":{"@id":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/#breadcrumb"},"inLanguage":"ja","potentialAction":[{"@type":"ReadAction","target":["https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/"]}]},{"@type":"ImageObject","inLanguage":"ja","@id":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/#primaryimage","url":"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2019\/10\/unit42-blog-600x300.jpg","contentUrl":"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2019\/10\/unit42-blog-600x300.jpg","width":600,"height":300},{"@type":"BreadcrumbList","@id":"https:\/\/unit42.paloaltonetworks.com\/ja\/unit42-henbox-chickens-come-home-roost\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/unit42.paloaltonetworks.com\/ja\/"},{"@type":"ListItem","position":2,"name":"HenBox: \u8607\u3063\u305f\u30ad\u30e3\u30f3\u30da\u30fc\u30f3"}]},{"@type":"WebSite","@id":"https:\/\/unit42.paloaltonetworks.com\/#website","url":"https:\/\/unit42.paloaltonetworks.com\/","name":"Unit 42","description":"Palo Alto Networks","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/unit42.paloaltonetworks.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ja"},{"@type":"Person","@id":"https:\/\/unit42.paloaltonetworks.com\/#\/schema\/person\/7d51f04a2afcca497cde7076d89d516f","name":"Alex Hinchliffe","image":{"@type":"ImageObject","inLanguage":"ja","@id":"https:\/\/unit42.paloaltonetworks.com\/#\/schema\/person\/image\/9213e49ea48b7676660bac40d05c9e3e","url":"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/11\/unit-news-meta.svg","contentUrl":"https:\/\/origin-unit42.paloaltonetworks.com\/wp-content\/uploads\/2018\/11\/unit-news-meta.svg","caption":"Alex Hinchliffe"},"url":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/author\/alex-hinchliffe\/"}]}},"_links":{"self":[{"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/posts\/100051","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/users\/46"}],"replies":[{"embeddable":true,"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/comments?post=100051"}],"version-history":[{"count":7,"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/posts\/100051\/revisions"}],"predecessor-version":[{"id":105657,"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/posts\/100051\/revisions\/105657"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/media\/99566"}],"wp:attachment":[{"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/media?parent=100051"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/categories?post=100051"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/tags?post=100051"},{"taxonomy":"product_categories","embeddable":true,"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/product_categories?post=100051"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/origin-unit42.paloaltonetworks.com\/ja\/wp-json\/wp\/v2\/coauthors?post=100051"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}