Rufe talla

Ana ɗaukar iOS a matsayin tsarin aiki mafi aminci a kasuwa, amma a jiya an sami labari mai tada hankali game da kwayar cutar da za ta iya cutar da iPhones da iPads ta USB. Ba wai babu wani malware da aka yi niyya ga iOS ba, amma an yi niyya ne kawai ga masu amfani da suka karya na'urarsu, suna lalata tsarin tsaro da sauran abubuwa. Kwayar cutar da ake kira WireLurker ta fi damuwa, domin tana iya kai hari ko da na'urorin da ba a fasa gidan yari ba.

An gano malware a jiya daga masu bincike daga Palo Alto Networks. WireLurker ya bayyana a kantin software na kasar Sin Maiyadi, wanda ke daukar nauyin wasanni da aikace-aikace masu yawa. Daga cikin manhajojin da aka kai harin akwai, alal misali, wasannin Sims 3, Pro Evolution Soccer 2014 ko International Snooker 2012. Waɗannan nau'ikan nau'ikan masu fashin teku ne. Bayan ƙaddamar da app ɗin da aka lalata, WireLurker yana jiran tsarin har sai mai amfani ya haɗa na'urar iOS ta USB. Kwayar cutar tana gano idan na'urar ta lalace kuma tana tafiya daidai.

Game da na'urorin da ba a karye ba, tana amfani da takaddun shaida don rarraba aikace-aikacen kamfani a wajen App Store. Kodayake an gargadi mai amfani game da shigarwa, da zarar sun yarda da shi, WireLurker ya shiga cikin tsarin kuma yana iya samun bayanan mai amfani daga na'urar. Kwayar cutar don haka a zahiri ba ta yin amfani da duk wani rami na tsaro da Apple ya kamata ya fashe, yana cin zarafin takardar shaidar da ke ba da damar shigar da aikace-aikacen zuwa iOS ba tare da izinin Apple ba. A cewar Palo Alto Networks, aikace-aikacen da aka kai wa harin sun sami abubuwan saukarwa sama da 350, don haka dubban daruruwan masu amfani da Sinawa musamman na iya fuskantar hadari.

Apple ya riga ya fara magance lamarin. Katange aikace-aikacen Mac daga aiki don hana mugun code aiki. Ta bakin mai magana da yawunta, ta sanar da cewa “kamfanin yana sane da wata manhajar kwamfuta da za a iya saukewa a shafin da ke yiwa masu amfani da China hari. Apple ya toshe aikace-aikacen da aka gano don hana su aiki. " Kamfanin ya kara soke takardar shedar ci gaban wanda WireLurker ya samo asali.

A cewar Dave Jevans na kamfanin tsaro ta wayar salula na Marble Security, Apple na iya kara hana yaduwa ta hanyar toshe uwar garken Maiyadi a cikin Safari, amma hakan ba zai hana masu amfani da Chrome, Firefox da sauran masu binciken yanar gizo ziyartar shafin ba. Bugu da ari, kamfanin na iya sabunta ginanniyar riga-kafi ta XProtect don hana shigar da WireLurker.

Source: Macworld
.