AceDeceiver, Trojan ka dhex muuqda Shiinaha oo saameeya aaladaha bilaa JAILBREAK

Waxaan had iyo jeer dhahnaa in qalabka macruufka ay aamin yihiin mid ka mid ah sababaha ugu waaweyn ee aan bixinayna waa in macruufka (iOS) uu yahay nidaam hawlgal oo xidhan. Dhibaatooyinka amniga badankood ee saameeya iPhone, iPod Touch ama iPad waxay saameeyaan aaladaha aan ku xirnay Jeilbroken maxaa yeelay markaan sidaas sameyno waxaan albaab u furnay dhibaatooyinka noocan ah. Laakiin kuwa ka soo horjeedda Jailbreak nabadgelyada waa inay ogaadaan inuusan jirin nidaam 100% amaan ah, sida Trojan cusub loogu yeeray Qaadashada in waxay saameyn ku yeelataa dadka isticmaala Shiinaha xitaa haddii aaladdaada aan la jabinin.

El furin ayaa lagu ogaaday by Palo Alto Networks waxayna hadda saameyn ku yeelaneysaa isticmaaleyaasha deggan Shiinaha. AceDeceiver wuxuu ku dhacaa qalabka macruufka iyadoo laga faa’iideysanayo cilladaha FairPlay, Nidaamka DRM ee Apple. Sida laga soo xigtay Palo Alto Networks, Trojan waxay isticmaashaa farsamo la yiraahdo "FairPlay Man-in-the-Middle" oo loo adeegsaday dubista si ay awood ugu yeelato inay ku rakibto barnaamijyo burcad-badeed iyadoo la adeegsanayo software-ka iTunes-ka ee been abuurka ah.

AceDeceiver wuxuu ka faa'iideystaa FairPlay

Apple wuxuu u oggolaanayaa dadka isticmaala inay iibsadaan oo ka soo dejistaan ​​barnaamijyada macruufka App Store iyagoo adeegsanaya macmiilka iTunes-ka ee kombiyuutarka Kumbuyuutarrada ayaa loo isticmaali karaa in lagu rakibo codsiyada aaladaha iOS. Qalabka IOS wuxuu ku weydiin doonaa lambar oggolaansho codsi kasta oo rakiban si loo xaqiijiyo in codsiga dhab ahaan la iibsaday. Weerarkii MITM FairPlay, weeraryahannadu waxay ka iibsadaan codsi App Store, ka dibna dhexda ka furaan oo keydiyaan lambarka oggolaanshaha.

Waxay soo saareen softiweer kombuyuutar ah oo u ekeysiinaya macmiilka iTunes-ka ah ee deggan oo khiyaameeya aaladaha iOS si loo rumeeyo in barnaamijka uu iibsaday dhibbanaha. Halkaa marka ay marayso, isticmaaluhu wuxuu rakibi karaa codsiyo aysan waligood lacag ku bixin oo abuuraha barnaamijka ayaa rakibi kara barnaamijyo khatar badan keeni kara iyadoon isticmaalehu ka warqabin.

Laga soo bilaabo Luulyo 2015 ilaa Febraayo 2016 seddex codsi ayaa la galiyay App Store taas oo ku jirtay lambarka AceDeceiver. Waxaa loo daabacay barnaamijyada darbiyada, markii ay dhab ahaan u siinayaan lambar oggolaansho kuwa wax weerara ee ay u adeegsan karaan weerarada AceDeceiver.

Mid baa jira Codsiga Windows ee loo yaqaan «Aisi Gargaare» taas oo loo maleynayo inay bixiso adeegyo sida keyd iyo nadiifin ay ku rakibeen isticmaaleyaal ka yimid Shiinaha. Codsigan wuxuu ku rakibaa barnaamijyo xunxun qalabka ku xiran kumbuyuutarka oo bixiya App Store dhinac saddexaad ah oo leh waxyaabo bilaash ah sida jillaab Qaybta saddexaad ee App Store waxay waydiisaneysaa isticmaaleyaasha inay soo galaan aqoonsigooda Apple iyo lambarka sirta ah macluumaadkaasna wuxuu ku dhammaadaa server-yada AceDeceiver.

App AceDeceiver oo muujinaya App Store aan rasmi ahayn

Apple ayaa ka saartay barnaamijyada bishii Febraayo, laakiin weerarradu weli waa suurtagal sababtoo ah kuwa weerarka soo qaaday waxay wali haystaan ​​nambarka oggolaanshaha. AceDeceiver wuxuu kaliya saameeyaa dadka isticmaala ee degan Shiinaha, laakiin Palo Alto Networks ayaa aaminsan in Trojan ama mid kale furin la mid ah ayaa lagu fidin karaa waddamada kale. Dhibaatada wali ma helin balastar amni waxayna ku jiri kartaa noocyo hore oo iOS ah oo aan hadda la taageerin, sida iPhone 4. Si kastaba ha noqotee, haddii dhibaatadu culus tahay, Apple ayaa laga yaabaa inay sii deyso cusbooneysiin kaliya si loo saxo khaladka .

Si loo shaqeeyo, AceDeceiver wuxuu hada ubaahan yahay isticmaalayaasha inay soo dejistaan ​​barnaamijka Aisi Helper Windows oo ay ku rakibaan kumbuyuutarkooda kahor furin qaadsiin karaa qalabka macruufka. Mar labaad, ayaa Muhiimadda kaliya soo degsashada softiweerka ilaha rasmiga ah iyo in wax kasta oo dhalaalaa aanu dahab ahayn. Tani waa sida ay muhiim u tahay ama laga yaabee inay ka muhiimsan tahay qalabka jailbroken, laakiin kiiskan soo degsashada faaidaysan iyo codsiyada kaliya ee ka imanaya meelaha lagu kalsoon yahay, sida BigBoss (in kasta oo ay jirtay dacwad meesha laga jabsaday oo waligeen 100% kuma hubi karno waxyaalahan). Waxa jira waqtiyo uu caqliga fayoobi noqdo kan ugu fiican ee fayraska fayraska.