Masu bincike daga ƙungiyar Google Project Zero sun gano wani rauni wanda shine mafi girma a tarihin dandamali na iOS. M malware sun yi amfani da kwari a cikin gidan yanar gizon Safari ta hannu.
Masanin kimiyya na Google Project Zero Ian Beer ya bayyana komai akan shafin sa. Babu wanda ya isa ya guje wa hare-haren a wannan karon. Ya isa ya ziyarci gidan yanar gizo mai cutar don kamuwa da cutar.
Masu sharhi daga Ƙungiyar Binciken Barazana (TAG) a ƙarshe sun gano jimillar kwari daban-daban guda biyar da suka kasance daga iOS 10 zuwa iOS 12. A takaice dai, maharan na iya amfani da raunin na akalla shekaru biyu tun lokacin da waɗannan tsarin ke kasuwa.
malware sunyi amfani da ƙa'ida mai sauƙi. Bayan ziyartar shafin, lambar tana gudana a bangon da aka canjawa wuri cikin sauƙi zuwa na'urar. Babban makasudin shirin shine tattara fayiloli da aika bayanan wurin a cikin tazarar minti daya. Kuma tun da shirin ya kwafi kansa a cikin ƙwaƙwalwar na'urar, ko da irin waɗannan iMessages ba su da lafiya daga gare ta.
TAG tare da Project Zero sun gano jimlar rashin lahani guda goma sha huɗu a cikin manyan kurakuran tsaro guda biyar. Daga cikin waɗannan, cikakkun bakwai masu alaƙa da Safari ta hannu a cikin iOS, wani biyar zuwa kernel na tsarin aiki kanta, kuma biyu ma sun sami damar ketare sandboxing. A lokacin ganowa, ba a sami lahani ba.
Masana daga Project Zero sun ruwaito Kuskuren Apple kuma ya ba su kwanaki bakwai bisa ga ka'idoji har zuwa bugawa. An sanar da kamfanin a ranar 1 ga Fabrairu, kuma kamfanin ya gyara kwaro a cikin sabuntawar da aka fitar a ranar 9 ga Fabrairu a cikin iOS 12.1.4.
Jerin waɗannan raunin yana da haɗari a cikin cewa maharan suna iya yada lambar cikin sauƙi ta wuraren da abin ya shafa. Tunda duk abin da ake buƙata don cutar da na'ura shine a loda gidan yanar gizo da gudanar da rubutun a bango, kusan kowa yana cikin haɗari.
An bayyana komai ta hanyar fasaha akan shafin Ingilishi na rukunin Google Project Zero. Shafin yana ƙunshe da ɗimbin bayanai dalla-dalla. Yana da ban mamaki yadda kawai mai binciken gidan yanar gizo zai iya aiki azaman hanyar shiga na'urarka. Ba a tilasta mai amfani ya shigar da komai ba.
Saboda haka tsaron na'urorin mu ba abu ne mai kyau ba da za a yi wasa da shi.
Petr Shakuta 
David Hanak 
