Analysis of Supply Chain Poisoning Samples in Domestic Software (Yinhu FakeApp/CW)

Vulnerability Summary Vulnerability Overview Vulnerability Name: Domestic Samples Testing of Silver Fox FakeApp/CW and Others Vulnerability Type: Malware / Backdoor Discovery Time: 2025-12-30 Vulnerability Description: Multiple domestic software samples were found to contain malicious code, including: - Backdoors (e.g., wpfsrthfsrjsej.exe) - Trojans (e.g., 360zip.exe, 360udhea_x64.2.1.exe) - Spyware (e.g., Trojan.MSILIPureLogStealer.ZYIIMTB detected by Microsoft Defender) Impact Scope Affected Software: - 360 Safe Guard related components - Microsoft Defender - Multiple domestic software installation packages Infection Method: Through downloading and installing these software samples Severity Level: High (may lead to data leakage, system control, etc.) Remediation Plan 1. Immediate Uninstallation: Uninstall all affected software 2. Full Disk Scan: Perform a full disk scan using antivirus software 3. System Update: Ensure the operating system and all software are up to date 4. Password Change: Change passwords for all important accounts 5. Activity Monitoring: Monitor system activity and check for any abnormal behavior POC Code / Exploit Code Other Related Information Multiple users have reported similar malware samples Some samples are marked as "MISS" (missing) Users are advised to be cautious when downloading and installing software from unknown sources

Goal Reached Thanks to every supporter — we hit 100%!

Analysis of Supply Chain Poisoning Samples in Domestic Software (Yinhu FakeApp/CW)