I-AceDeceiver, iTrojan evela eChina futhi ethinta amadivayisi ngaphandle kwe-jailbreak

Sivame ukuthi amadivayisi we-iOS aphephile futhi esinye sezizathu esiyinhloko esinikeza ngaso ukuthi i-iOS uhlelo olusebenzayo oluvaliwe. Izinkinga eziningi zokuphepha ezithinta i-iPhone, i-iPod Touch noma i-iPad zithinta amadivayisi esiyiJailbroken ngoba ngokwenza kanjalo sivule umnyango walezi zinhlobo zezinkinga. Kepha labo abamelene neJailbreak yezokuphepha kumele bazi ukuthi alukho uhlelo oluphephile nge-100%, njengoba iTrojan entsha ibizwa kanjalo Umkhohlisi lokho kuthinta abasebenzisi eChina noma ngabe idivayisi yakho ayikaze iphulwe ejele.

El I-malware itholwe ngu Ama-Palo Alto Networks futhi okwamanje kuthinta abasebenzisi abahlala eChina. I-AceDeceiver ithelela amadivayisi we-iOS usebenzisa ama-FairPlay glitches, Uhlelo lwe-DRM lwe-Apple. Ngokusho kwePalo Alto Networks, iTrojan isebenzisa inqubo ebizwa nge- "FairPlay Man-in-the-Middle" esetshenzisiwe kokosa ukuze ikwazi ukufaka izinhlelo zokusebenza ezigwazelwe kusetshenziswa isoftware eyimbumbulu ye-iTunes.

I-AceDeceiver isebenzisa i-FairPlay

I-Apple ivumela abasebenzisi ukuthi bathenge futhi balande izinhlelo ze-iOS ku-App Store yayo ngokusebenzisa iklayenti le-iTunes kukhompyutha. Amakhompyutha angasetshenziswa ukufaka izinhlelo zokusebenza kumadivayisi we-iOS. Amadivayisi we-IOS azocela ikhodi yokugunyazwa kuhlelo lokusebenza ngalunye olufakiwe ukuqinisekisa ukuthi uhlelo luthengiwe ngempela. Ekuhlaselweni kwe-MITM FairPlay, abahlaseli bathenga uhlelo lokusebenza ku-App Store, bese babamba bese bagcina ikhodi yokugunyazwa.

Bathuthukise isoftware ye-PC efanisa iklayenti le-iTunes elihlala kulo namaqhinga amadivayisi we-iOS ukuze akholelwe ukuthi uhlelo lokusebenza luthengwe isisulu. Ngaleso sikhathi, umsebenzisi angafaka izinhlelo angakaze azikhokhele futhi umenzi wesoftware angafaka izinhlelo zokusebenza ezingaba yingozi ngaphandle kolwazi lomsebenzisi.

Kusukela ngoJulayi 2015 kuya kuNhlolanja 2016 izicelo ezintathu zilayishwe ku-App Store ebiqukethe ikhodi ye-AceDeceiver. Zishicilelwe njengezinhlelo zokusebenza zephephadonga, lapho empeleni zinikeze ikhodi yokugunyaza kubahlaseli abangayisebenzisa ekuhlaselweni kwe-AceDeceiver.

Kukhona eyodwa Uhlelo lwe-Windows olubizwa nge- «Aisi Helper» okufanele inikeze ngezinsizakalo ezifana nokwenza isipele nokuhlanza okufakwe ngabasebenzisi abavela eChina. Lolu hlelo lokusebenza lufaka izinhlelo ezinonya kumadivayisi axhuma kwikhompyutha, luhlinzeka nge-App Store yenkampani yangaphandle enokuqukethwe kwamahhala njengehhuku. I-App Store evela eceleni icela abasebenzisi ukuthi bafake i-Apple ID ne-password yabo futhi leyo mininingwane iphelela kumaseva we-AceDeceiver.

Uhlelo lokusebenza lwe-AceDeceiver olubonisa i-App Store engekho emthethweni

I-Apple isuse izinhlelo zokusebenza ngoFebhuwari, kepha ukuhlaselwa kusenokwenzeka ngoba abahlaseli basenayo ikhodi yokugunyazwa. I-AceDeceiver ithinta kuphela abasebenzisi abahlala eChina, kepha uPalo Alto Networks ukholelwa ukuthi le Trojan noma enye I-malware okufanayo kunganwetshwa nakwamanye amazwe. Inkinga ayikatholi isichibi sokuphepha futhi ingaba khona kuzinguqulo ezindala ze-iOS ezingasasekelwa, njenge-iPhone 4. Kunoma ikuphi, uma inkinga inkulu, ngokuqinisekile i-Apple izokhipha isibuyekezo ukuze ilungise iphutha .

Ukuze usebenze, i-AceDeceiver okwamanje idinga abasebenzisi ukuthi balande uhlelo lwe-Aisi Helper Windows bese belifaka kukhompyutha yabo ngaphambi I-malware ingathelela amadivayisi we-iOS. Nakulokhu futhi, i- ukubaluleka kokulanda isoftware kuphela emithonjeni esemthethweni nokuthi konke okucwebezelayo akulona igolide. Lokhu kubaluleke kakhulu noma mhlawumbe kubaluleke kakhulu kumadivayisi we-jailbroken, kepha kulokhu kulandwa ukulungisa nezinhlelo zokusebenza kuphela ezivela kumakhosombe athembekile, afana neBigBoss (yize kwakukhona icala lapho ligqekeziwe futhi asisoze saqiniseka nge-100% ngalezi zinto). Kunezikhathi lapho ukusebenzisa ingqondo kungaba i-antivirus engcono kakhulu.