AceDeceiver, Trojan wanda ya bayyana a cikin China kuma yana shafar na'urori ba tare da yantad da ba

Sau da yawa muna faɗin cewa na'urorin iOS suna da lafiya kuma ɗayan manyan dalilan da muke bayarwa shine cewa iOS rufaffiyar tsarin aiki ce. Yawancin matsalolin tsaro da suka shafi iPhone, iPod Touch ko iPad suna shafar na'urorin da muke da Jailbroken saboda yin hakan mun buɗe ƙofa ga irin waɗannan matsalolin. Amma waɗanda ke adawa da yantad da don tsaro dole su sani cewa babu wani tsarin da ke da aminci 100%, kamar yadda sabon Trojan ya kira Mai karba que yana shafar masu amfani a China ko da na'urarka ba ta da matsala.

El malware an gano ta Palo Alto Networks kuma a halin yanzu yana shafar masu amfani da ke zaune a China. AceDeceiver yana cutar da na'urorin iOS yin amfani da glitches na FairPlay, Tsarin DRM na Apple. A cewar Palo Alto Networks, Trojan na amfani da wata dabara da ake kira "FairPlay Man-in-the-Middle" wanda aka yi amfani da shi a cikin soyayyen domin samun damar girka aikace-aikacen barayin mutane ta hanyar amfani da software na iTunes na jabu.

AceDeceiver yayi amfani da FairPlay

Apple yana bawa masu amfani damar siye da saukar da aikace-aikacen iOS daga App Store ta hanyar abokin cinikin iTunes akan kwamfuta. Ana iya amfani da kwamfyuta don shigar da aikace-aikace a kan na'urorin iOS. Na'urorin IOS zasu nemi lambar izini ga kowane aikace-aikacen da aka girka don tabbatar da cewa da gaske an sayi aikace-aikacen. A cikin harin MITM FairPlay, maharan sun sayi aikace-aikace daga App Store, sa'annan su tsoma baki da adana lambar izini.

Sun kirkiro wata software ta PC wacce take kwaikwayon mazaunin iTunes abokin harka da kuma yaudarar na'urorin iOS cikin yarda cewa wanda aka azabtar ya sayi app din. A wancan lokacin, mai amfani na iya girka aikace-aikacen da basu taɓa biya ba kuma mahaliccin software zai iya shigar da aikace-aikace masu haɗari ba tare da sanin mai amfani ba.

Daga Yuli 2015 zuwa Fabrairu 2016 an shigar da aikace-aikace guda uku zuwa App Store wannan ya ƙunshi lambar AceDeceiver. An buga su azaman aikace-aikacen bangon waya, lokacin da a zahiri suka bayar da lambar izini ga maharan da za su iya amfani da su a harin AceDeceiver.

Akwai Aikace-aikacen Windows da ake kira «Aisi Helper» wanda yakamata ya bayar da ayyuka kamar wariyar ajiya da tsaftacewa waɗanda masu amfani daga China suka girka. Wannan aikace-aikacen yana shigar da mugayen aikace-aikace a kan na'urorin da suka haɗa komputa, suna ba da Storeangare na uku na App Store tare da abun ciki kyauta azaman ƙugiya. Storeangare na uku na App Store yana buƙatar masu amfani su shigar da ID na Apple da kalmar wucewa kuma wannan bayanin ya ƙare akan sabobin AceDeceiver.

Manhajar AceDeceiver da ke nuna Shagon App ba izini

Apple ya cire aikace-aikacen a watan Fabrairu, amma har yanzu hare-haren na yiwuwa saboda maharan har yanzu suna da lambar izini. AceDeceiver kawai yana shafar masu amfani da ke zaune a China, amma Palo Alto Networks sunyi imanin cewa wannan Trojan ɗin ko wata malware ana iya fadada irin wannan zuwa wasu ƙasashe. Matsalar har yanzu ba ta karɓi facin tsaro ba kuma tana iya kasancewa a cikin tsofaffin nau'ikan iOS waɗanda ba a tallafawa yanzu, kamar su iPhone 4. A kowane hali, idan matsalar ta kasance mai tsanani, tabbas Apple zai saki sabuntawa don kawai gyara kuskuren .

Don aiki, AceDeceiver a halin yanzu yana buƙatar masu amfani su zazzage aikace-aikacen Aisi Helper Windows kuma shigar da su akan kwamfutarsu kafin malware iya cutar da na'urorin iOS. Har yanzu, da mahimmancin sauke software kawai daga asalin hukuma kuma duk abin da yake kyalkyali ba zinariya bane. Wannan yana da mahimmanci ko watakila mafi mahimmanci akan na'urorin jailbroken, amma a wannan yanayin saukarwa tweaks da aikace-aikace kawai daga wuraren adana amintattu, kamar BigBoss (duk da cewa akwai shari'ar da aka sata kuma ba zamu taɓa samun tabbaci 100% game da waɗannan abubuwa ba) Akwai lokuta lokacin da hankali mai ma'ana zai iya zama mafi kyawun riga-kafi.