{"id":564,"date":"2023-03-29T12:13:00","date_gmt":"2023-03-29T15:13:00","guid":{"rendered":"https:\/\/techsecurity.com.br\/?p=564"},"modified":"2023-03-29T12:13:01","modified_gmt":"2023-03-29T15:13:01","slug":"aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos","status":"publish","type":"post","link":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/","title":{"rendered":"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Aplicativos Android assinados digitalmente pela terceira maior empresa de com\u00e9rcio eletr\u00f4nico da China exploraram uma vulnerabilidade de 0day que lhes permitiu assumir o controle de milh\u00f5es de dispositivos de usu\u00e1rios de android para roubar dados pessoais e instalar aplicativos maliciosos, confirmaram pesquisadores da empresa de seguran\u00e7a Lookout. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As vers\u00f5es maliciosas do aplicativo Pinduoduo estavam dispon\u00edveis em mercados de terceiros, dos quais os usu\u00e1rios na China e em outros lugares dependem porque o mercado oficial do Google Play est\u00e1 fora dos limites ou n\u00e3o \u00e9 f\u00e1cil de acessar. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nenhuma vers\u00e3o maliciosa foi encontrada no Play ou na App Store da Apple. Na segunda-feira passada, o TechCrunch informou que o Pinduoduo foi retirado do Play depois que o Google descobriu uma vers\u00e3o maliciosa do aplicativo dispon\u00edvel em outro lugar. O TechCrunch relatou que os aplicativos maliciosos dispon\u00edveis em mercados de terceiros exploraram v\u00e1rias vulnerabilidades de 0day, que s\u00e3o conhecidas ou exploradas antes que um fornecedor tenha um patch dispon\u00edvel. <\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Ataque sofisticado <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Uma an\u00e1lise preliminar da Lookout descobriu que pelo menos duas vers\u00f5es off-Play do Pinduoduo para Android exploraram o <strong>CVE-2023-20963<\/strong>. Essa falha de eleva\u00e7\u00e3o de privil\u00e9gios, que foi explorada antes da divulga\u00e7\u00e3o do Google, permitiu que o aplicativo realizasse opera\u00e7\u00f5es com privil\u00e9gios elevados. O aplicativo usava esses privil\u00e9gios para baixar o c\u00f3digo de um site designado pelo desenvolvedor e execut\u00e1-lo em um ambiente privilegiado. Os aplicativos maliciosos representam <em>\u201cum ataque muito sofisticado para um malware baseado em aplicativo\u201d<\/em>, escreveu Christoph Hebeisen, um dos tr\u00eas pesquisadores da Lookout que analisaram o arquivo, em um e-mail. <em>\u201cNos \u00faltimos anos, as explora\u00e7\u00f5es geralmente n\u00e3o eram vistas no contexto de aplicativos distribu\u00eddos em massa. Dada a natureza extremamente intrusiva desse sofisticado malware baseado em aplicativos, essa \u00e9 uma importante amea\u00e7a contra a qual os usu\u00e1rios m\u00f3veis precisam se proteger.\u201d<\/em>.<\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Sobre o APP<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pinduoduo \u00e9 um aplicativo de com\u00e9rcio eletr\u00f4nico para conectar compradores e vendedores. Recentemente, foi relatado ter 751,3 milh\u00f5es de usu\u00e1rios ativos mensais. Embora ainda menor do que seus rivais chineses Alibaba e JD.com, a PDD Holdings, empresa-m\u00e3e de capital aberto da Pinduoduo, tornou-se a empresa de com\u00e9rcio eletr\u00f4nico que mais cresce naquele pa\u00eds. Depois que o Google removeu o Pinduoduo do Play, os representantes da PDD Holdings negaram as alega\u00e7\u00f5es de que qualquer uma das vers\u00f5es do aplicativo era maliciosa. <em>\u201cRejeitamos veementemente a especula\u00e7\u00e3o e a acusa\u00e7\u00e3o de que o aplicativo Pinduoduo \u00e9 malicioso de um pesquisador an\u00f4nimo\u201d<\/em>, escreveram eles em um e-mail. <em>\u201cO Google Play nos informou na manh\u00e3 de 21 de mar\u00e7o que o aplicativo Pinduoduo, entre v\u00e1rios outros aplicativos, foi suspenso temporariamente porque a vers\u00e3o atual n\u00e3o est\u00e1 em conformidade com a pol\u00edtica do Google, mas n\u00e3o compartilhou mais detalhes. Estamos nos comunicando com o Google para mais informa\u00e7\u00f5es\u201d.<\/em> Os representantes da empresa n\u00e3o responderam aos e-mails com perguntas de acompanhamento e divulgaram os resultados da an\u00e1lise forense da Lookout. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As suspeitas sobre o aplicativo Pinduoduo surgiram pela primeira vez no m\u00eas passado em um post (tradu\u00e7\u00e3o em ingl\u00eas aqui) de um servi\u00e7o de pesquisa que se autodenomina Dark Navy. A tradu\u00e7\u00e3o em ingl\u00eas dizia que<em> \u201cfabricantes conhecidos da Internet continuar\u00e3o a descobrir novas vulnerabilidades relacionadas ao Android OEM e implementar ataques de vulnerabilidade em sistemas de telefonia m\u00f3vel convencionais no mercado atual em seus aplicativos lan\u00e7ados publicamente\u201d<\/em>. A postagem n\u00e3o nomeava a empresa ou o aplicativo, mas dizia que o aplicativo usava um \u201cpacote feng shui-Android de serializa\u00e7\u00e3o e desserializa\u00e7\u00e3o [exploit] que parece desconhecido nos \u00faltimos anos\u201d. A postagem inclu\u00eda v\u00e1rios trechos de c\u00f3digo encontrados no aplicativo supostamente malicioso. Uma dessas strings \u00e9 &#8220;LuciferStrategy&#8221;.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"253\" src=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-4.png\" alt=\"\" class=\"wp-image-565\" srcset=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-4.png 640w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-4-300x119.png 300w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><figcaption class=\"wp-element-caption\">Trecho do c\u00f3digo com referencia \u00e0 LuciferStrategy.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Algumas semanas depois, algu\u00e9m com o nome de usu\u00e1rio davinci1012 publicou uma postagem no Github com o nome traduzido \u201c<strong>Pinduoduo backdoor<\/strong>\u201d. Referia-se ao post da Dark Navy e fornecia o c\u00f3digo e as etapas que os pesquisadores poderiam seguir para perfurar as defesas anti-an\u00e1lise e encontrar uma suposta explora\u00e7\u00e3o nos aplicativos Pinduoduo para Android publicados antes de 5 de mar\u00e7o. O Google removeu o aplicativo Pinduoduo do Google Play alguns dias depois que a segunda postagem davinci1012 foi publicada.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Al\u00e9m de determinar a presen\u00e7a do 0day, tamb\u00e9m descobriu evid\u00eancias de: <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Adicionar\/gerenciar widgets nos dispositivos infectados<\/li>\n\n\n\n<li>Monitoramento de estat\u00edsticas de uso de aplicativos instalados<\/li>\n\n\n\n<li>Monitoramento de notifica\u00e7\u00f5es <\/li>\n\n\n\n<li>Acessos Wi-Fi e informa\u00e7\u00f5es de localiza\u00e7\u00e3o<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">IOC\u00b4s<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3c5a0eba055633f0444b9f69ae70dc93938ecb6b5df34d8e677c96d7c77f113f 234aa7a4a70026e0585a3bf2acae1cb21d414aeb6f3d76955e92e445de998944<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos<\/p>\n","protected":false},"author":2,"featured_media":566,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[19],"tags":[111,112,36],"class_list":["post-564","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-informativo","tag-0day","tag-android","tag-malware"],"yoast_head":"<title>Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos - Tech Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos - Tech Security\" \/>\n<meta property=\"og:description\" content=\"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos\" \/>\n<meta property=\"og:url\" content=\"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/\" \/>\n<meta property=\"og:site_name\" content=\"Tech Security\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-29T15:13:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-29T15:13:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-29-malware-0day.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"566\" \/>\n\t<meta property=\"og:image:height\" content=\"412\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"redator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"redator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/\"},\"author\":{\"name\":\"redator\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\"},\"headline\":\"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos\",\"datePublished\":\"2023-03-29T15:13:00+00:00\",\"dateModified\":\"2023-03-29T15:13:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/\"},\"wordCount\":828,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-29-malware-0day.jpg\",\"keywords\":[\"0day\",\"android\",\"malware\"],\"articleSection\":[\"Informativo\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/\",\"name\":\"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos - Tech Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-29-malware-0day.jpg\",\"datePublished\":\"2023-03-29T15:13:00+00:00\",\"dateModified\":\"2023-03-29T15:13:01+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/#primaryimage\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-29-malware-0day.jpg\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-29-malware-0day.jpg\",\"width\":566,\"height\":412},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/techsecurity.com.br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"name\":\"Tech Security\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/techsecurity.com.br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\",\"name\":\"Tech Security\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"width\":100,\"height\":89,\"caption\":\"Tech Security\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\",\"name\":\"redator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"caption\":\"redator\"},\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/author\\\/redator\\\/\"}]}<\/script>","yoast_head_json":{"title":"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos - Tech Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/","og_locale":"pt_BR","og_type":"article","og_title":"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos - Tech Security","og_description":"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos","og_url":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/","og_site_name":"Tech Security","article_published_time":"2023-03-29T15:13:00+00:00","article_modified_time":"2023-03-29T15:13:01+00:00","og_image":[{"width":566,"height":412,"url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-29-malware-0day.jpg","type":"image\/jpeg"}],"author":"redator","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"redator","Est. tempo de leitura":"5 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/#article","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/"},"author":{"name":"redator","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6"},"headline":"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos","datePublished":"2023-03-29T15:13:00+00:00","dateModified":"2023-03-29T15:13:01+00:00","mainEntityOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/"},"wordCount":828,"commentCount":0,"publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-29-malware-0day.jpg","keywords":["0day","android","malware"],"articleSection":["Informativo"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/","url":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/","name":"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos - Tech Security","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/#primaryimage"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-29-malware-0day.jpg","datePublished":"2023-03-29T15:13:00+00:00","dateModified":"2023-03-29T15:13:01+00:00","breadcrumb":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/#primaryimage","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-29-malware-0day.jpg","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-29-malware-0day.jpg","width":566,"height":412},{"@type":"BreadcrumbList","@id":"https:\/\/techsecurity.com.br\/2023\/03\/aplicativo-chines-explorou-falha-0day-em-milhoes-de-dispositivos\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/techsecurity.com.br\/"},{"@type":"ListItem","position":2,"name":"Aplicativo chines explorou falha 0day em milh\u00f5es de dispositivos"}]},{"@type":"WebSite","@id":"https:\/\/techsecurity.com.br\/#website","url":"https:\/\/techsecurity.com.br\/","name":"Tech Security","description":"","publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/techsecurity.com.br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/techsecurity.com.br\/#organization","name":"Tech Security","url":"https:\/\/techsecurity.com.br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","width":100,"height":89,"caption":"Tech Security"},"image":{"@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6","name":"redator","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","caption":"redator"},"url":"https:\/\/techsecurity.com.br\/author\/redator\/"}]}},"wps_subtitle":"","_links":{"self":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/564","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/comments?post=564"}],"version-history":[{"count":1,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/564\/revisions"}],"predecessor-version":[{"id":567,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/564\/revisions\/567"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media\/566"}],"wp:attachment":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media?parent=564"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/categories?post=564"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/tags?post=564"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}