Wintoys 开发者 @Bogdan_X 在 Reddit 爆料：“我发现了一场大规模的恶意软件攻击行动，攻击者冒充超过 70 款热门 Windows 软件，建立了假冒官网诱导用户下载，最终向用户传播恶意软件。”他最初发现，有人注册了与 Wintoys 相关的冒牌域名，并使用自己的应用名称和旧版 Logo 制作假网站。进一步调查后发现，而是一批针对 Windows 软件的仿冒网站网络，共涉及 72 个域名，包括 PowerToys、WinUtil、EasyBCD、CrystalDiskMark 等知名工具。假冒软件官网这事以前经常发生，传统的重灾区是 VS Code、PotPlayer 这些知名软件，假冒者制作了虚假的官网，并提供软件下载。用户在运行假冒软件后会弹出付费二维码，引导用户扫码付费。但这些软件原本是免费提供的。现在，这个风潮已经飘向了全球…就很难绷。Wintoys 冒牌域名作为 Wintoys 的开发者，Bogdan_X 说他偶尔会搜索应用名称，筛选最新结果，看看有没有新的文章或者评论。然后他就这样发现的假冒域名 Wintoys[.]app，使用了相同的软件名称和旧版 logo。他还吐槽：「这个网站是用 WordPress 搭建的，内容粗制滥造，充斥着不实信息，却试图伪装成对普通用户有用的正规网站。」72个冒牌域名然后，他又发现了一些有趣的现象：包括 PowerToys、WinUtil、EasyBCD、CrystalDiskMark 等软件，一共 72 款软件，72 个域名，全部指向同一个所有者。这些域名大多数与假冒 Wintoys 的域名类似，甚至还有一些尚未完成的网站，这表明该行动仍处于初期阶段。涉及的软件包括：软件名称类型Chris Titus Tech Windows Utility（WinUtil）Windows 优化工具DroidKit安卓数据恢复工具EasyBCDWindows 启动管理工具Microsoft PowerToysWindows 系统增强工具ShellMenuView右键菜单管理工具WinExpWindows 窗口管理工具ZHP CleanerWindows 清理工具Cursors Library鼠标光标资源工具FakeFlashTest闪存/U 盘检测工具SearchMyFiles文件搜索工具WintoysWindows 系统优化工具Mouse Clicker自动点击工具Quick Assist（快速助手）远程协助工具Move Mouse防休眠自动移动鼠标工具NirCmdWindows 命令行工具CrystalDiskInfo硬盘健康检测工具Product Key ScannerWindows 产品密钥查看工具USBLogViewUSB 设备记录查看工具Mouse Cursors鼠标光标工具mimalloc内存分配器（开发库）MuMu Player安卓模拟器wushowhideWindows 更新隐藏工具GUIFormatFAT32 格式化工具FreeFileSync文件同步工具SpaceSniffer磁盘空间分析工具Simple Sticky Notes桌面便签工具Mousecape鼠标光标美化工具Hashcat密码哈希安全审计工具DSHidMini游戏手柄驱动darktableRAW 照片处理软件Daijisho安卓模拟器前端SKSE64游戏 Mod 扩展工具SageAttentionAI 推理优化库ReZygiskAndroid Root 模块pwndbg调试工具插件OCRmyPDFPDF OCR 工具mongoshMongoDB 命令行工具nvim-lspconfigNeovim LSP 配置插件Live Clock With Seconds桌面时钟工具JE2BEMinecraft 存档转换工具ISO2GODXbox 游戏镜像转换工具hifiasm基因组组装软件Hard Disk Sentinel硬盘监控工具hakchi2NES/SNES Classic 游戏管理工具GLideN64N64 模拟器图形插件PyJWTPython JWT 开发库ArduinoDroidAndroid Arduino 开发工具CxxdroidAndroid C++ IDEKalkulyator计算器应用以下是全部假冒域名列表：序号假冒域名注册商注册时间更新时间过期时间1christitustool.comEpik Inc.22 May 202615 Jul 202622 May 20272droidkit.proEpik Inc.22 May 20263 Jun 202622 May 20273easybcd.appEpik Inc.22 May 20263 Jun 202622 May 20274powertoys.appEpik Inc.16 Apr 202623 Apr 202616 Apr 20275shellmenuview.comEpik Inc.16 Apr 202623 Apr 202616 Apr 20276winexp.appEpik Inc.16 Apr 202623 Apr 202616 Apr 20277zhpcleaner.comEpik Inc.16 Apr 202623 Apr 202616 Apr 20278cursorslibrary.comEpik Inc.16 Apr 202623 Apr 202616 Apr 20279fakeflashtest.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202710searchmyfiles.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202711wintoys.appEpik Inc.16 Apr 202623 Apr 202616 Apr 202712themouseclicker.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202713quickassistapp.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202714move-mouse.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202715movemouse.netEpik Inc.16 Apr 202623 Apr 202616 Apr 202716nircmd.netEpik Inc.16 Apr 202623 Apr 202616 Apr 202717crystaldiskinfo.appEpik Inc.22 May 20263 Jun 202622 May 202718freewheelofnames.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202719productkeyscanner.comEpik Inc.16 Apr 20267 Jun 202616 Apr 202720power-toys.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202721chatmate.infoEpik Inc.12 Apr 202618 Apr 202612 Apr 202722usblogview.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202723mouse-mover.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202724mouse-cursors.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202725mouse-clicker.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202726mimalloc.comEpik Inc.22 May 202616 Jun 202622 May 202727mumuplayer.appEpik Inc.16 Apr 202623 Apr 202616 Apr 202728wushowhide.comEpik Inc.16 Apr 202623 Apr 202616 Apr 202729guiformat.appEpik Inc.22 May 20263 Jun 202622 May 202730freefilesync.netEpik Inc.4 Apr 20267 Apr 20264 Apr 202731winutil.appEpik Inc.22 May 202622 May 202622 May 202732spacesniffer.appEpik Inc.22 May 202622 May 202622 May 202733simplestickynotes.appEpik Inc.22 May 202622 May 202622 May 202734showmore.appEpik Inc.22 May 202622 May 202622 May 202735mousecape.appEpik Inc.22 May 202622 May 202622 May 202736hashcat.appEpik Inc.22 May 202622 May 202622 May 202737dshidmini.appEpik Inc.22 May 202622 May 202622 May 202738darktable.appEpik Inc.22 May 202622 May 202622 May 202739daijisho.appEpik Inc.22 May 202622 May 202622 May 202740wiblr.comEpik Inc.22 May 202622 May 202622 May 202741skse64.comEpik Inc.22 May 202622 May 202622 May 202742sageattention.comEpik Inc.22 May 202622 May 202622 May 202743rezygisk.comEpik Inc.22 May 202622 May 202622 May 202744pwndbg.comEpik Inc.22 May 202622 May 202622 May 202745ocrmypdf.comEpik Inc.22 May 202622 May 202622 May 202746notatnikonline.comEpik Inc.22 May 202622 May 202622 May 202747noisium.comEpik Inc.22 May 202622 May 202622 May 202748mousecape.netEpik Inc.22 May 202622 May 202622 May 202749mongosh.comEpik Inc.22 May 202622 May 202622 May 202750lspconfig.comEpik Inc.22 May 202622 May 202622 May 202751liveclockwithseconds.comEpik Inc.22 May 202622 May 202622 May 202752lax1dude.comEpik Inc.22 May 202622 May 202622 May 202753je2be.comEpik Inc.22 May 202622 May 202622 May 202754iso2god.comEpik Inc.22 May 202622 May 202622 May 202755hifiasm.comEpik Inc.22 May 202622 May 202622 May 202756hddsentinel.comEpik Inc.22 May 202622 May 202622 May 202757hakchi2.comEpik Inc.22 May 202622 May 202622 May 202758gliden64.comEpik Inc.22 May 202622 May 202622 May 202759furfsky.comEpik Inc.22 May 202622 May 202622 May 202760freeminutetimer.comEpik Inc.22 May 202622 May 202622 May 202761findoutdate.comEpik Inc.22 May 202622 May 202622 May 202762crystaldiskmark.netEpik Inc.22 May 202622 May 202622 May 202763bepisdb.comEpik Inc.22 May 202622 May 202622 May 202764beardlib.comEpik Inc.22 May 202622 May 202622 May 20276510mintimer.comEpik Inc.22 May 202622 May 202622 May 202766pyjwt.comEpik Inc.22 May 202622 May 202622 May 202767moliyachi.comEpik Inc.23 Feb 202612 Mar 202623 Feb 202768arduinodroid.comEpik Inc.23 Feb 202612 Mar 202623 Feb 202769cxxdroid.comEpik Inc.23 Feb 202612 Mar 202623 Feb 202770kalkulyator.comEpik Inc.23 Feb 202612 Mar 202623 Feb 202771retraitedz.comEpik Inc.23 Feb 202612 Mar 202623 Feb 202772urlaubscountdown.comEpik Inc.23 Feb 202612 Mar 202623 Feb 2027截止2026年7月28日，Wintoys 的假冒网站已经被投诉，由 Cloudflare 下架。但其他大部分网站都还活着。对于这个事情，似乎没有很好的解决方式。有一个很重要的原因：能找到软件官网的用户，不会被骗找不到官网的用户，才是这些网站的目标用户原文：https://www.appinn.com/windows-apps-fake-websites-malware/相关阅读AI 内容真假难辨？Mozilla 推出 Deep Fake Detector 扩展一键识别真伪Opera GX 游戏浏览器推出了一个神奇的功能：「去世后」伪造我的历史记录 Fake My History正版 5 月惠来了！桌面神器 + 效率工具 5 折起，不用苦等 618数码荔枝迎新春活动：精选正版软件 5 折起警惕假冒 7zip 官网：7-Zip 下载链接被篡改，Windows 安装包被植入后门©2021 青小蛙 for 小众软件 | 加入我们 | 投稿 | 订阅指南 3659b075e72a5b7b1b87ea74aa7932ff 点击这里留言、和原作者一起评论[ 点击前往获取链接 ]