\u5176\u5b9eiPhone\u4e0a\u9762\u7684\u90a3\u4e2a\u8815\u866b\u75c5\u6bd2\u5df2\u7ecf\u662f\u53bb\u5e74\u7684\u4e8b\u60c5\u4e86\uff0c\u4e3b\u8981\u75c7\u72b6\u5c31\u662f\u4f1a\u4f5c\u4e3a\u4e00\u4e2aDaemon\u7a0b\u5e8f\u9a7b\u5b88\u5728iphone\u91cc\u9762\uff0c\u7136\u540e\u5b9a\u671f\u53bb\u641c\u7d22\u540c\u7f51\u7edc\u4e2d\u7684\u5176\u4ed6iPhone\u624b\u673a\uff0c\u5229\u7528\u5176\u8d8a\u72f1\u540essh\u5bc6\u7801\u540e\u95e8\u6563\u5e03\u81ea\u5df1\u3002\u6240\u4ee5\u4f1a\u5e72\u6270\u4f60\u7684wifi\u7f51\u7edc\u548c\u5077\u8d70\u4f60\u7684GPRS\u6d41\u91cf\u3002\u4e4b\u524d\u4ffa\u786e\u5b9e\u4e2d\u8fc7\uff0c\u5e76\u4e14\u5e72\u6389\u4e86\uff0c\u6b8a\u4e0d\u77e5\u524d\u4e24\u5929\u4e3a\u4e86\u73a9Spirit\u7684\u5b8c\u7f8e\u8d8a\u72f1\uff0c\u5c06\u673a\u5668\u5347\u7ea7\u52303.1.3\uff0c\u7136\u540e\u4e0d\u662f\u662f\u56e0\u4e3a\u8d8a\u72f1\u4e4b\u540e\u5fd8\u8bb0\u4e86\u4fee\u6539\u5bc6\u7801\u7ed3\u679c\u5728\u516c\u53f8\u7f51\u7edc\u91cc\u9762\u611f\u67d3\u4e86\u5176\u4ed6\u540c\u4e8b\u7684iPhone\uff08\u5728twitter\u4e0a\u9762\u6211\u8bf4\u8fc7\uff0c\u5f00\u4f1a\u7684\u65f6\u5019\u5de6\u53f3\u540e\u90fd\u662fiphone\uff09\uff0c\u8fd8\u662f\u6062\u590d\u4e86\u4e4b\u524d\u7684\u8bbe\u7f6e\uff0c\u6240\u4ee5\u5c45\u7136\u53c8\u4e2d\u4e86\uff08\u56e0\u4e3a\u53d1\u73b0\u8fd9\u4e24\u5929\u673a\u5b50\u8017\u7535\u4e86\uff0c\u53e6\u5916\u7528\u4e00\u4e9b\u9700\u8981\u4e0a\u7f51\u7684\u8f6f\u4ef6\uff0c\u4f8b\u5982TwitBird\u548c\u5f00\u5fc3\u7f51\u7684\u65f6\u5019\u4f1a\u65e0\u7f18\u65e0\u6545\u9000\u51fa\uff0c\u8fd9\u4e2a\u4e0d\u77e5\u9053\u662f3.1.3\u517c\u5bb9\u6027\u95ee\u9898\u8fd8\u662f\u771f\u7684\u56e0\u4e3a\u8815\u866b\u5e72\u6270\u7f51\u7edc\u5bb3\u7684\uff0c\u4e8e\u662f\u67e5\u4e86\u4e00\u4e0b\u673a\u5668\u4e0a\u9762\u7684\u6587\u4ef6\uff0c\u7ed3\u679c\u5c31\u53d1\u73b0\u4e86\uff09\u3002\u6240\u4ee5\u8fd8\u662f\u5728\u81ea\u5df1\u7684blog\u4e0a\u9762\u7559\u4e2a\u5907\u4efd\u5427\u3002<\/p>\n
\u5148\u662f\u5904\u7406\u7684\u95ee\u9898\uff1a<\/p>\n
\u5220\u9664\u4ee5\u4e0b\u8def\u5f84\u7684\u6587\u4ef6\uff08\u6709\u4e9b\u4e0d\u4e00\u5b9a\u6709\uff09\uff1a<\/p>\n
(1). \/var\/mobile\/Library\/LockBackground.jpg \uff08\u5148\u68c0\u67e5\u8fd9\u4e2a\u662f\u4f60\u81ea\u5b9a\u4e49\u7684\u80cc\u666f\u8fd8\u662f\u5df2\u7ecf\u88ab\u75c5\u6bd2\u611f\u67d3\u7684\uff0c\u5982\u679c\u8fd8\u662f\u81ea\u5df1\u7684\u5c31\u4e0d\u7528\u5220\u9664\u4e86\uff09
\n(2). \/System\/Library\/LaunchDaemons\/com.ikey.bbot.plist
\n(3). \/bin\/poc-bbot
\n(4). \/bin\/sshpass
\n(5). \/var\/log\/youcanbeclosertogod.jpg
\n(6). \/var\/lock\/bbot.lock<\/p><\/blockquote>\n\u8bb0\u5f97\u5220\u9664\u6587\u4ef6\u4e4b\u540e\u8981\u91cd\u542f\u4e00\u4e0biphone<\/span><\/p>\n
\u7136\u540e\u5c31\u662f\u9884\u9632\u7684\u529e\u6cd5\uff0c\u5c31\u662f\u628a\u7f3a\u7701\u7684\u7528\u6237\u5bc6\u7801\uff08alpine\uff09\u4fee\u6539\u6389\uff0c\u5c01\u4f4f\u8815\u866b\u6563\u64ad\u7684\u540e\u95e8\u3002<\/p>\n
\u4fee\u6539root\u548cmobile\u7528\u6237\u7684\u5bc6\u7801<\/p>\n
\u53e6\u5916\u6211\u8fd8\u53d1\u73b0\uff0c\u5728\/var\/logs\/CrashReporter\u76ee\u5f55\u4e0b\u9762\u8fd8\u4f1a\u542b\u6709\u4e0d\u5c11*bbot*.plist\u7684\u6587\u4ef6\uff0c\u4f30\u8ba1\u662fpoc-bbot\u7a0b\u5e8fcrash\u6389\u7684\u65e5\u5fd7\u8bb0\u5f55\uff0c\u53ef\u4ee5\u4e00\u5e76\u5220\u9664\u3002\u53cd\u6b63\u5230\u6700\u540e\u7528root\u5728\u6839\u76ee\u5f55\u5f00\u59cbfind\u4e00\u4e0b\u6709\u6ca1\u6709*bbot*\u7684\u6b8b\u4f59\u5c31\u597d\u4e86\u3002<\/p>\n
iPhone\u5c01\u95ed\u662f\u4e3a\u4e86\u81ea\u5df1\u7a33\u5b9a\uff0c\u4f60\u786c\u662f\u8981\u8d8a\u72f1\u5e72\u66f4\u591a\u7684\u4e8b\u60c5\uff0c\u5c31\u9884\u7740\u8981\u5bf9\u4ed8\u75c5\u6bd2\u548c\u8815\u866b\u7684\u9a9a\u6270\uff0c\u51fa\u6765\u884c\u662f\u8981\u8fd8\u7684\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5176\u5b9eiPhone\u4e0a\u9762\u7684\u90a3\u4e2a\u8815\u866b\u75c5\u6bd2\u5df2\u7ecf\u662f\u53bb\u5e74\u7684\u4e8b\u60c5\u4e86\uff0c\u4e3b\u8981\u75c7\u72b6\u5c31\u662f\u4f1a\u4f5c\u4e3a\u4e00\u4e2aDaemon\u7a0b\u5e8f\u9a7b\u5b88\u5728iphone … \u7ee7\u7eed\u9605\u8bfbiPhone\u8815\u866b\u75c5\u6bd2\u7684\u5904\u7406\u548c\u9632\u6cbb<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pgc_sgb_lightbox_settings":"","footnotes":""},"categories":[5,8],"tags":[24,57,126],"class_list":["post-3527","post","type-post","status-publish","format-standard","hentry","category-develop","category-leisure","tag-apple","tag-iphone","tag-virus"],"_links":{"self":[{"href":"https:\/\/www.sunnyblog.net\/blog\/wp-json\/wp\/v2\/posts\/3527","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sunnyblog.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sunnyblog.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sunnyblog.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sunnyblog.net\/blog\/wp-json\/wp\/v2\/comments?post=3527"}],"version-history":[{"count":0,"href":"https:\/\/www.sunnyblog.net\/blog\/wp-json\/wp\/v2\/posts\/3527\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.sunnyblog.net\/blog\/wp-json\/wp\/v2\/media?parent=3527"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sunnyblog.net\/blog\/wp-json\/wp\/v2\/categories?post=3527"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sunnyblog.net\/blog\/wp-json\/wp\/v2\/tags?post=3527"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}