ha opay

BankBot, sabon sigar Trojan ta hannu

Sabbin "aikin" na marubutan ƙwayoyin cuta shine dalili mai kyau don sanin sabbin fasahohi da tuna matakan tsaro na asali. Duk da kokarin da Google ke yi na rigakafin kamuwa da cututtuka, girke-girke na "Taimakawa Kanku" har yanzu shine mafi inganci, amma lura ba ya ceto kowane lokaci.

BankBot, sabon nau'in trojan wayar hannu

Ana iya samun cikakken "bayani" a kan Avast blog (Turanci), wannan lokacin gwajin riga-kafi ya haɗu tare da ESET da SfyLabs don nazarin Trojan. Har yanzu, ana samun aikace-aikacen da suka kamu da cutar a Kasuwar Google Play kuma an zazzage su daga dubban masu amfani da su daga ƙasashe da yawa, ciki har da Rasha. Kamar yadda kake gani, mantra na gargajiya “Kada a sauke aikace-aikacen daga tushen ɓangare na uku? kuma duk zai yi kyau!" baya aiki kullum. Google koyaushe yana inganta sarrafa aikace-aikacen kafin a sanya su akan Google Play, amma masu zamba za su kasance 'yan matakai a gaba. Na farko, "maƙiyan" suna samun madaidaici da / ko fito da sabon tsari, sannan Google kawai ya rufe raunin. Haka kuma har sai abin da ya faru na gaba.

A cikin jerin bankunan da aka jera ''da abin ya shafa'' da ke aiki a Rasha, na ga Citibank ne kawai, amma wannan ba dalili bane na shakatawa. Na farko, Avast review yana da alƙawarin ". da sauran bankuna da dama. Abu na biyu, akwai sunaye 160 (!) a cikin jerin Trojan na aikace-aikacen banki masu rauni. Abu na uku, tabbas wannan ba shine trojan na ƙarshe na banki don Android da za mu iya ci karo da shi ba.

BankBot, sabon sigar mobile trojan

Tsarin da ya gabata na trojan na BankBot ya bayyana a Google Play a cikin kamannin aikace-aikacen "super-progressive" a cikin nau'in "flashlight", "laushi mai laushi" da wani abu makamancin haka. A mataki na gaba, wasanni masu sauƙi na katin da shirye-shirye don tsaftace ƙwaƙwalwar ajiyar wayar daga datti sun bayyana. Ban san abin da ainihin "hasken walƙiya" ya jawo hankali ba kuma yana ci gaba da jawo hankalin marubutan Trojan sosai, amma shekaru da yawa ya kasance harsashi da aka fi so ga kowane irin datti. Sayi kanka akwatin ashana ko wuta, LED na mafi yawan wayoyi ba sa samar da haske mai yawa. Musamman idan wannan “hasken walƙiya” saboda wasu dalilai ya nemi samun damar yin amfani da littafin adireshi, karantawa / aika SMS, da sauransu. Duk da haka, yanzu wannan bai dace ba, sabbin samfuran Trojan ɗin ba sa neman wani abu yayin shigar da aikace-aikacen kuma kada ku ƙara ƙararrawa. duk wannan zai kasance daga baya kuma a wani tsari. Kuma duk ayyukan da aka bayyana a hukumance a cikin aikace-aikacen aikace-aikacen, hasken walƙiya yana haskakawa kamar yadda aka alkawarta, an murƙushe katunan.

Yadda yake aiki

Wataƙila, bisa shawarar abokina (a hacked social network account?), kana zazzage wani aikace-aikacen gaba ɗaya mara laifi daga Google Play wanda baya buƙatar komai daga gare ku. a Uganda, tallace-tallace 408496 Kamar yadda na riga na rubuta, aikace-aikacen ba shi da amfani sosai, amma yana aiki kamar yadda aka bayyana kuma yana aikatawa. ba tada zato. Bayan haka, Trojan ɗin yana bincika software ɗin da aka sanya akan wayar kuma yana bincika jerin aikace-aikacen banki 160. Bayan gano matches ɗaya ko fiye, yana buɗe sabis da ke gudana a bango kuma ya fara aiwatar da zazzage aikace-aikacen da ya dace daga uwar garken gudanarwa.

Yana buƙatar haƙƙoƙin gudanarwa, yin kama da sabunta tsarin ko sabunta kasuwar Play, bayan karɓar izini, yana jira awanni biyu. Avast ya rubuta cewa dakatarwar ya zama dole don ketare tabbatarwar Google. Bayan zazzage aikace-aikacen daga uwar garken gudanarwa, yana ƙoƙarin shigar da shi ta hanyar daidaitaccen tsari don shigar da aikace-aikacen daga tushen ɓangare na uku. Ya bayyana cewa sigar baya ta wannan trojan na banki ya sami damar samun izini a bayan fage ba tare da sanin mai amfani ba ta hanyar Sabis ɗin Samun damar. A cikin Google, an toshe wannan yuwuwar aikace-aikacen kawai a cikin faɗuwar 2017. Wannan game da shawarar kar a zazzage aikace-aikace daga tushen ɓangare na uku. Kamar yadda ya bayyana, ba a tambaye mu ba. Yanzu (har yanzu?) trojan yana tambaya, amma ba mu sani ba ko akwai wata madogara.

Bayan shigar da aikace-aikacen, Trojan ɗin yana bincika ko an shigar da aikace-aikacen akan na'urar ta gaske ko kuma akan na'urar kwaikwayo na tsarin da labs na riga-kafi ke amfani da shi. Yana aiki akan na'urori na gaske kawai.

Lokacin da aka ƙaddamar da aikace-aikacen banki, Trojan yana maye gurbin shafukan farko da nasa kuma ya karanta bayanan da mai amfani ya shigar. Suna rubuta cewa maye yana faruwa a cikin tsaga na biyu kuma mai amfani ba shi da lokacin lura da wani abu. Tabbacin abubuwa guda biyu baya taimakawa ko dai, Trojan na iya saɓawa, karantawa da aika saƙonnin SMS.

Yadda ake kare kanku

A al'adance, Avast a shafinsa yana lissafta matakan kiyayewa da yakamata a kiyaye. Abin bakin ciki ne cewa yawancin matakan da ke sama ba za su yi aiki a wannan yanayin ba. Kusan kawai alama mai ban tsoro shine sabon saitin haƙƙoƙi da izini don aikace-aikace mai sauƙi. Sannan, waɗannan izini ana buƙatar ba ta “hasken walƙiya” da aka zazzage ba, amma, kamar dai, ta hanyar sabunta tsarin “shigo” ko kuma Google Play Market kanta. To, wani buƙatu don ba da izinin shigar da aikace-aikacen daga tushen ɓangare na uku. Koyaya, idan kwanan nan aka sami nasarar tsallake wannan ƙuntatawa, to ina tabbacin ba za a sami wani madogara ba?

Ba da dadewa ba, kalmar "wawa da kansa" ta shafi yawancin cututtuka, yanzu ban sani ba. Na karanta game da wannan BankBot kuma ban ga sakaci na mai amfani ba, musamman lokacin kamuwa da sigar baya. Ikon aikace-aikacen a gefen Play Market shima baya ajiyewa koyaushe. Antivirus? Wataƙila ba zai cutar da shi ba, sabon “samfurin” na BankBot an gane shi ta riga-kafi. Koyaya, kwanan nan an gaya mini game da Trojan ɗin da ya aika SMS zuwa lambobin da aka biya. Wani fasali mai ban sha'awa: ba za a iya ƙaddamar da riga-kafi guda ɗaya akan wayar salula mai dauke da wannan Trojan ba, da kyar ta zo daidai.

An ba da shawarar kula da bayyanar aikace-aikacen kuma, idan kun ga wani abu da ba a saba gani ba, kar ku yi amfani da shi. Fatan a yi kuskuren aiwatar da canjin ko kuma bankin ya sami nasarar canza ƙirar software? Banal, amma shawara mai tasiri - kada ku yi kasala don karanta sake dubawa kafin saukewa. Ko da muna magana ne game da wasan farko.

Abin nufi shi ne, masu son yin amfani da aikace-aikacen banki, za su samu wata wayar salula ta daban, wacce za su iya shigar da su kawai aikace-aikacen da aka saba amfani da su, ba sa amfani da browser, social networks kuma ba sa bude links kwata-kwata. Haka kuma babu inda za a “haske” lambar wayar katin SIM da aka saka a cikin wannan wayar salula. Kwayoyin cuta suna da wayo sosai. Kuma ina maimaita: 'yan zamba sun kasance koyaushe kuma za su kasance mataki ɗaya a gaban waɗanda ke ƙoƙarin ceton mu. Af, Avast ya rubuta cewa ba a gane sigar da ta gabata na wannan Trojan na dogon lokaci ba kuma ya kasance yana samuwa akan Kasuwar Google Play. Duk da cewa an gina aikin ƙwayoyin cuta a ciki kuma ba a sauke su ba, kamar yadda yake a yanzu, daban bayan shigarwa. Hakanan a lura cewa software ɗin tana da ingantattun hanyoyin da ke hana saurin gano ta. Idan wayar ku ba ta da ɗaya daga cikin aikace-aikacen banki masu rauni, to, Trojan ba zai ma zazzage abubuwan da ke cikin sabar daga uwar garken ba, yana aiki tare da masu sauraron da ake niyya.

A yau, ana iya la'akari da kariya a matsayin haɗakar da hana shigar aikace-aikace daga tushen ɓangare na uku. Wataƙila, ana iya la'akari da shi, kodayake an riga an karya wannan kariyar. Google ne ya rufe wannan lahani na musamman, amma shine kaɗai? Gabaɗaya, lafiya a gare ku da wayoyin hannu, kodayake yana da wahala a kula da rigakafin kowace shekara.

BankBot, sabon sigar Trojan ta hannu

Sabbin "aikin" na marubutan ƙwayoyin cuta shine dalili mai kyau don sanin sabbin fasahohi da tuna matakan tsaro na asali. Duk da kokarin da Google ke yi na rigakafin kamuwa da cututtuka, girke-girke na "Taimakawa Kanku" har yanzu shine mafi inganci, amma lura ba ya ceto kowane lokaci.

BankBot, sabon nau'in trojan wayar hannu

Ana iya samun cikakken "bayani" a kan Avast blog (Turanci), wannan lokacin gwajin riga-kafi ya haɗu tare da ESET da SfyLabs don nazarin Trojan. Har yanzu, ana samun aikace-aikacen da suka kamu da cutar a Kasuwar Google Play kuma an zazzage su daga dubban masu amfani da su daga ƙasashe da yawa, ciki har da Rasha. Kamar yadda kake gani, mantra na gargajiya “Kada a sauke aikace-aikacen daga tushen ɓangare na uku? kuma duk zai yi kyau!" baya aiki kullum. Google koyaushe yana inganta sarrafa aikace-aikacen kafin a sanya su akan Google Play, amma masu zamba za su kasance 'yan matakai a gaba. Na farko, "maƙiyan" suna samun madaidaici da / ko fito da sabon tsari, sannan Google kawai ya rufe raunin. Haka kuma har sai abin da ya faru na gaba.

A cikin jerin bankunan da aka jera ''da abin ya shafa'' da ke aiki a Rasha, na ga Citibank ne kawai, amma wannan ba dalili bane na shakatawa. Na farko, Avast review yana da alƙawarin ". da sauran bankuna da dama. Abu na biyu, akwai sunaye 160 (!) a cikin jerin Trojan na aikace-aikacen banki masu rauni. Abu na uku, tabbas wannan ba shine trojan na ƙarshe na banki don Android da za mu iya ci karo da shi ba.

BankBot, sabon sigar mobile trojan

Tsarin da ya gabata na trojan na BankBot ya bayyana a Google Play a cikin kamannin aikace-aikacen "super-progressive" a cikin nau'in "flashlight", "laushi mai laushi" da wani abu makamancin haka. A mataki na gaba, wasanni masu sauƙi na katin da shirye-shirye don tsaftace ƙwaƙwalwar ajiyar wayar daga datti sun bayyana. Ban san abin da ainihin "hasken walƙiya" ya jawo hankali ba kuma yana ci gaba da jawo hankalin marubutan Trojan sosai, amma shekaru da yawa ya kasance harsashi da aka fi so ga kowane irin datti. Sayi kanka akwatin ashana ko wuta, LED na mafi yawan wayoyi ba sa samar da haske mai yawa. Musamman idan wannan “hasken walƙiya” saboda wasu dalilai ya nemi samun damar yin amfani da littafin adireshi, karantawa / aika SMS, da sauransu. Duk da haka, yanzu wannan bai dace ba, sabbin samfuran Trojan ɗin ba sa neman wani abu yayin shigar da aikace-aikacen kuma kada ku ƙara ƙararrawa. duk wannan zai kasance daga baya kuma a wani tsari. Kuma duk ayyukan da aka bayyana a hukumance a cikin aikace-aikacen aikace-aikacen, hasken walƙiya yana haskakawa kamar yadda aka alkawarta, an murƙushe katunan.

Yadda yake aiki

Wataƙila, bisa shawarar abokina (a hacked social network account?), kana zazzage wani aikace-aikacen gaba ɗaya mara laifi daga Google Play wanda baya buƙatar komai daga gare ku. a Uganda, tallace-tallace 408496 Kamar yadda na riga na rubuta, aikace-aikacen ba shi da amfani sosai, amma yana aiki kamar yadda aka bayyana kuma yana aikatawa. ba tada zato. Bayan haka, Trojan ɗin yana bincika software ɗin da aka sanya akan wayar kuma yana bincika jerin aikace-aikacen banki 160. Bayan gano matches ɗaya ko fiye, yana buɗe sabis da ke gudana a bango kuma ya fara aiwatar da zazzage aikace-aikacen da ya dace daga uwar garken gudanarwa.

Yana buƙatar haƙƙoƙin gudanarwa, yin kama da sabunta tsarin ko sabunta kasuwar Play, bayan karɓar izini, yana jira awanni biyu. Avast ya rubuta cewa dakatarwar ya zama dole don ketare tabbatarwar Google. Bayan zazzage aikace-aikacen daga uwar garken gudanarwa, yana ƙoƙarin shigar da shi ta hanyar daidaitaccen tsari don shigar da aikace-aikacen daga tushen ɓangare na uku. Ya bayyana cewa sigar baya ta wannan trojan na banki ya sami damar samun izini a bayan fage ba tare da sanin mai amfani ba ta hanyar Sabis ɗin Samun damar. A cikin Google, an toshe wannan yuwuwar aikace-aikacen kawai a cikin faɗuwar 2017. Wannan game da shawarar kar a zazzage aikace-aikace daga tushen ɓangare na uku. Kamar yadda ya bayyana, ba a tambaye mu ba. Yanzu (har yanzu?) trojan yana tambaya, amma ba mu sani ba ko akwai wata madogara.

Bayan shigar da aikace-aikacen, Trojan ɗin yana bincika ko an shigar da aikace-aikacen akan na'urar ta gaske ko kuma akan na'urar kwaikwayo na tsarin da labs na riga-kafi ke amfani da shi. Yana aiki akan na'urori na gaske kawai.

Lokacin da aka ƙaddamar da aikace-aikacen banki, Trojan yana maye gurbin shafukan farko da nasa kuma ya karanta bayanan da mai amfani ya shigar. Suna rubuta cewa maye yana faruwa a cikin tsaga na biyu kuma mai amfani ba shi da lokacin lura da wani abu. Tabbacin abubuwa guda biyu baya taimakawa ko dai, Trojan na iya saɓawa, karantawa da aika saƙonnin SMS.

Yadda ake kare kanku

A al'adance, Avast a shafinsa yana lissafta matakan kiyayewa da yakamata a kiyaye. Abin bakin ciki ne cewa yawancin matakan da ke sama ba za su yi aiki a wannan yanayin ba. Kusan kawai alama mai ban tsoro shine sabon saitin haƙƙoƙi da izini don aikace-aikace mai sauƙi. Sannan, waɗannan izini ana buƙatar ba ta “hasken walƙiya” da aka zazzage ba, amma, kamar dai, ta hanyar sabunta tsarin “shigo” ko kuma Google Play Market kanta. To, wani buƙatu don ba da izinin shigar da aikace-aikacen daga tushen ɓangare na uku. Koyaya, idan kwanan nan aka sami nasarar tsallake wannan ƙuntatawa, to ina tabbacin ba za a sami wani madogara ba?

Ba da dadewa ba, kalmar "wawa da kansa" ta shafi yawancin cututtuka, yanzu ban sani ba. Na karanta game da wannan BankBot kuma ban ga sakaci na mai amfani ba, musamman lokacin kamuwa da sigar baya. Ikon aikace-aikacen a gefen Play Market shima baya ajiyewa koyaushe. Antivirus? Wataƙila ba zai cutar da shi ba, ƙwayoyin rigakafi sun gane sabon “samfurin” na BankBot. Koyaya, kwanan nan an gaya mini game da Trojan ɗin da ya aika SMS zuwa lambobin da aka biya. Wani fasali mai ban sha'awa: ba za a iya ƙaddamar da riga-kafi guda ɗaya akan wayar salula mai dauke da wannan Trojan ba, da kyar ta zo daidai.

An ba da shawarar kula da bayyanar aikace-aikacen kuma, idan kun ga wani abu da ba a saba gani ba, kar ku yi amfani da shi. Fatan a yi kuskuren aiwatar da canjin ko kuma bankin ya sami nasarar canza ƙirar software? Banal amma ingantacciyar shawara ba ta zama kasala don karanta bita kafin saukewa ba. Ko da muna magana ne game da wasan farko.

Abin nufi shi ne, masu son yin amfani da aikace-aikacen banki, za su samu wata wayar salula ta daban, wacce za su iya shigar da su kawai aikace-aikacen da aka saba amfani da su, ba sa amfani da browser, social networks kuma ba sa bude links kwata-kwata. Haka kuma babu inda za a “haske” lambar wayar katin SIM da aka saka a cikin wannan wayar salula. Kwayoyin cuta suna da wayo sosai. Kuma ina maimaita: 'yan zamba sun kasance koyaushe kuma za su kasance mataki ɗaya a gaban waɗanda ke ƙoƙarin ceton mu. Af, Avast ya rubuta cewa ba a gane sigar da ta gabata na wannan Trojan na dogon lokaci ba kuma ya kasance yana samuwa akan Kasuwar Google Play. Duk da cewa an gina aikin ƙwayoyin cuta a ciki kuma ba a sauke su ba, kamar yadda yake a yanzu, daban bayan shigarwa. Hakanan a lura cewa software ɗin tana da ingantattun hanyoyin da ke hana saurin gano ta. Idan wayar ku ba ta da ɗaya daga cikin aikace-aikacen banki masu rauni, to, Trojan ba zai ma zazzage abubuwan da ke cikin sabar daga uwar garken ba, yana aiki tare da masu sauraron da ake niyya.

A yau, ana iya la'akari da kariya a matsayin haɗakar da hana shigar aikace-aikace daga tushen ɓangare na uku. Wataƙila, ana iya la'akari da shi, kodayake an riga an karya wannan kariyar. Google ne ya rufe wannan lahani na musamman, amma shine kaɗai? Gabaɗaya, lafiya a gare ku da wayoyin hannu, kodayake yana da wahala a kula da rigakafin kowace shekara.

BankBot, sabon sigar Trojan ta hannu

Sabbin "aikin" na marubutan ƙwayoyin cuta shine dalili mai kyau don sanin sabbin fasahohi da tuna matakan tsaro na asali. Duk da kokarin da Google ke yi na rigakafin kamuwa da cututtuka, girke-girke na "Taimakawa Kanku" har yanzu shine mafi inganci, amma lura ba ya ceto kowane lokaci.

BankBot, sabon nau'in trojan wayar hannu

Ana iya samun cikakken "bayani" a kan Avast blog (Turanci), wannan lokacin gwajin riga-kafi ya haɗu tare da ESET da SfyLabs don nazarin Trojan. Har yanzu, ana samun aikace-aikacen da suka kamu da cutar a Kasuwar Google Play kuma an zazzage su daga dubban masu amfani da su daga ƙasashe da yawa, ciki har da Rasha. Kamar yadda kake gani, mantra na gargajiya “Kada a sauke aikace-aikacen daga tushen ɓangare na uku? kuma duk zai yi kyau!" baya aiki kullum. Google koyaushe yana inganta sarrafa aikace-aikacen kafin a sanya su akan Google Play, amma masu zamba za su kasance 'yan matakai a gaba. Na farko, "maƙiyan" suna samun madaidaici da / ko fito da sabon tsari, sannan Google kawai ya rufe raunin. Haka kuma har sai abin da ya faru na gaba.

A cikin jerin bankunan da aka jera ''da abin ya shafa'' da ke aiki a Rasha, na ga Citibank ne kawai, amma wannan ba dalili bane na shakatawa. Na farko, Avast review yana da alƙawarin ". da sauran bankuna da dama. Abu na biyu, akwai sunaye 160 (!) a cikin jerin Trojan na aikace-aikacen banki masu rauni. Abu na uku, tabbas wannan ba shine trojan na ƙarshe na banki don Android da za mu iya ci karo da shi ba.

BankBot, sabon sigar mobile trojan

Tsarin da ya gabata na trojan na BankBot ya bayyana a Google Play a cikin kamannin aikace-aikacen "super-progressive" a cikin nau'in "flashlight", "laushi mai laushi" da wani abu makamancin haka. A mataki na gaba, wasanni masu sauƙi na katin da shirye-shirye don tsaftace ƙwaƙwalwar ajiyar wayar daga datti sun bayyana. Ban san abin da ainihin "hasken walƙiya" ya jawo hankali ba kuma yana ci gaba da jawo hankalin marubutan Trojan sosai, amma shekaru da yawa ya kasance harsashi da aka fi so ga kowane irin datti. Sayi kanka akwatin ashana ko wuta, LED na mafi yawan wayoyi ba sa samar da haske mai yawa. Musamman idan wannan “hasken walƙiya” saboda wasu dalilai ya nemi samun damar yin amfani da littafin adireshi, karantawa / aika SMS, da sauransu. Duk da haka, yanzu wannan bai dace ba, sabbin samfuran Trojan ɗin ba sa neman wani abu yayin shigar da aikace-aikacen kuma kada ku ƙara ƙararrawa. duk wannan zai kasance daga baya kuma a wani tsari. Kuma duk ayyukan da aka bayyana a hukumance a cikin aikace-aikacen aikace-aikacen, hasken walƙiya yana haskakawa kamar yadda aka alkawarta, an murƙushe katunan.

Yadda yake aiki

Wataƙila, bisa shawarar abokina (a hacked social network account?), kana zazzage wani aikace-aikacen gaba ɗaya mara laifi daga Google Play wanda baya buƙatar komai daga gare ku. a Uganda, tallace-tallace 408496 Kamar yadda na riga na rubuta, aikace-aikacen ba shi da amfani sosai, amma yana aiki kamar yadda aka bayyana kuma yana aikatawa. ba tada zato. Bayan haka, Trojan ɗin yana bincika software ɗin da aka sanya akan wayar kuma yana bincika jerin aikace-aikacen banki 160. Bayan gano matches ɗaya ko fiye, yana buɗe sabis da ke gudana a bango kuma ya fara aiwatar da zazzage aikace-aikacen da ya dace daga uwar garken gudanarwa.

Yana buƙatar haƙƙoƙin gudanarwa, yin kama da sabunta tsarin ko sabunta kasuwar Play, bayan karɓar izini, yana jira awanni biyu. Avast ya rubuta cewa dakatarwar ya zama dole don ketare tabbatarwar Google. Bayan zazzage aikace-aikacen daga uwar garken gudanarwa, yana ƙoƙarin shigar da shi ta hanyar daidaitaccen tsari don shigar da aikace-aikacen daga tushen ɓangare na uku. Ya bayyana cewa sigar baya ta wannan trojan na banki ya sami damar samun izini a bayan fage ba tare da sanin mai amfani ba ta hanyar Sabis ɗin Samun damar. A cikin Google, an toshe wannan yuwuwar aikace-aikacen kawai a cikin faɗuwar 2017. Wannan game da shawarar kar a zazzage aikace-aikace daga tushen ɓangare na uku. Kamar yadda ya bayyana, ba a tambaye mu ba. Yanzu (har yanzu?) trojan yana tambaya, amma ba mu sani ba ko akwai wata madogara.

Bayan shigar da aikace-aikacen, Trojan ɗin yana bincika ko an shigar da aikace-aikacen akan na'urar ta gaske ko kuma akan na'urar kwaikwayo na tsarin da labs na riga-kafi ke amfani da shi. Yana aiki akan na'urori na gaske kawai.

Lokacin da aka ƙaddamar da aikace-aikacen banki, Trojan yana maye gurbin shafukan farko da nasa kuma ya karanta bayanan da mai amfani ya shigar. Suna rubuta cewa maye yana faruwa a cikin tsaga na biyu kuma mai amfani ba shi da lokacin lura da wani abu. Tabbacin abubuwa guda biyu baya taimakawa ko dai, Trojan na iya saɓawa, karantawa da aika saƙonnin SMS.

Yadda ake kare kanku

A al'adance, Avast a shafinsa yana lissafta matakan kiyayewa da yakamata a kiyaye. Abin bakin ciki ne cewa yawancin matakan da ke sama ba za su yi aiki a wannan yanayin ba. Kusan kawai alama mai ban tsoro shine sabon saitin haƙƙoƙi da izini don aikace-aikace mai sauƙi. Sannan, waɗannan izini ana buƙatar ba ta “hasken walƙiya” da aka zazzage ba, amma, kamar dai, ta hanyar sabunta tsarin “shigo” ko kuma Google Play Market kanta. To, wani buƙatu don ba da izinin shigar da aikace-aikacen daga tushen ɓangare na uku. Koyaya, idan kwanan nan aka sami nasarar tsallake wannan ƙuntatawa, to ina tabbacin ba za a sami wani madogara ba?

Ba da dadewa ba, kalmar "wawa da kansa" ta shafi yawancin cututtuka, yanzu ban sani ba. Na karanta game da wannan BankBot kuma ban ga sakaci na mai amfani ba, musamman lokacin kamuwa da sigar baya. Ikon aikace-aikacen a gefen Play Market shima baya ajiyewa koyaushe. Antivirus? Wataƙila ba zai cutar da shi ba, sabon “samfurin” na BankBot an gane shi ta riga-kafi. Koyaya, kwanan nan an gaya mini game da Trojan ɗin da ya aika SMS zuwa lambobin da aka biya. Wani fasali mai ban sha'awa: ba za a iya ƙaddamar da riga-kafi guda ɗaya akan wayar salula mai dauke da wannan Trojan ba, da kyar ta zo daidai.

An ba da shawarar kula da bayyanar aikace-aikacen kuma, idan kun ga wani abu da ba a saba gani ba, kar ku yi amfani da shi. Fatan a yi kuskuren aiwatar da canjin ko kuma bankin ya sami nasarar canza ƙirar software? Banal, amma shawara mai tasiri - kada ku yi kasala don karanta sake dubawa kafin saukewa. Ko da muna magana ne game da wasan farko.

Abin nufi shi ne, masu son yin amfani da aikace-aikacen banki, za su samu wata wayar salula ta daban, wacce za su iya shigar da su kawai aikace-aikacen da aka saba amfani da su, ba sa amfani da browser, social networks kuma ba sa bude links kwata-kwata. Haka kuma babu inda za a “haske” lambar wayar katin SIM da aka saka a cikin wannan wayar salula. Kwayoyin cuta suna da wayo sosai. Kuma ina maimaita: 'yan zamba sun kasance koyaushe kuma za su kasance mataki ɗaya a gaban waɗanda ke ƙoƙarin ceton mu. Af, Avast ya rubuta cewa ba a gane sigar da ta gabata na wannan Trojan na dogon lokaci ba kuma ya kasance yana samuwa akan Kasuwar Google Play. Duk da cewa an gina aikin ƙwayoyin cuta a ciki kuma ba a sauke su ba, kamar yadda yake a yanzu, daban bayan shigarwa. Hakanan a lura cewa software ɗin tana da ingantattun hanyoyin da ke hana saurin gano ta. Idan wayar ku ba ta da ɗaya daga cikin aikace-aikacen banki masu rauni, to, Trojan ba zai ma zazzage abubuwan da ke cikin sabar daga uwar garken ba, yana aiki tare da masu sauraron da ake niyya.

A yau, ana iya la'akari da kariya a matsayin haɗakar da hana shigar aikace-aikace daga tushen ɓangare na uku. Wataƙila, ana iya la'akari da shi, kodayake an riga an karya wannan kariyar. Google ne ya rufe wannan lahani na musamman, amma shine kaɗai? Gabaɗaya, lafiya a gare ku da wayoyin hannu, kodayake yana da wahala a kula da rigakafin kowace shekara.

BankBot, sabon sigar Trojan ta hannu

Sabbin "aikin" na marubutan ƙwayoyin cuta shine dalili mai kyau don sanin sabbin fasahohi da tuna matakan tsaro na asali. Duk da kokarin da Google ke yi na rigakafin kamuwa da cututtuka, girke-girke na "Taimakawa Kanku" har yanzu shine mafi inganci, amma lura ba ya ceto kowane lokaci.

Ana iya samun cikakken "bayani" a kan Avast blog (Turanci), wannan lokacin gwajin riga-kafi ya haɗu tare da ESET da SfyLabs don nazarin Trojan. Har yanzu, ana samun aikace-aikacen da suka kamu da cutar a Kasuwar Google Play kuma an zazzage su daga dubban masu amfani da su daga ƙasashe da yawa, ciki har da Rasha. Kamar yadda kake gani, mantra na gargajiya “Kada a sauke aikace-aikacen daga tushen ɓangare na uku? kuma duk zai yi kyau!" baya aiki kullum. Google koyaushe yana inganta sarrafa aikace-aikacen kafin a sanya su akan Google Play, amma masu zamba za su kasance 'yan matakai a gaba. Na farko, "maƙiyan" suna samun madaidaici da / ko fito da sabon tsari, sannan Google kawai ya rufe raunin. Haka kuma har sai abin da ya faru na gaba.

A cikin jerin bankunan da aka jera ''da abin ya shafa'' da ke aiki a Rasha, na ga Citibank ne kawai, amma wannan ba dalili bane na shakatawa. Na farko, Avast review yana da alƙawarin ". da sauran bankuna da dama. Abu na biyu, akwai sunaye 160 (!) a cikin jerin Trojan na aikace-aikacen banki masu rauni. Abu na uku, tabbas wannan ba shine trojan na ƙarshe na banki don Android da za mu iya ci karo da shi ba.

Tsarin da ya gabata na trojan na BankBot ya bayyana a Google Play a cikin kamannin aikace-aikacen "super-progressive" a cikin nau'in "flashlight", "laushi mai laushi" da wani abu makamancin haka. A mataki na gaba, wasanni masu sauƙi na katin da shirye-shirye don tsaftace ƙwaƙwalwar ajiyar wayar daga datti sun bayyana. Ban san abin da ainihin "hasken walƙiya" ya jawo hankali ba kuma yana ci gaba da jawo hankalin marubutan Trojan sosai, amma shekaru da yawa ya kasance harsashi da aka fi so ga kowane irin datti. Sayi kanka akwatin ashana ko wuta, LED na mafi yawan wayoyi ba sa samar da haske mai yawa. Musamman idan wannan “hasken walƙiya” saboda wasu dalilai ya nemi samun damar yin amfani da littafin adireshi, karantawa / aika SMS, da sauransu. Duk da haka, yanzu wannan bai dace ba, sabbin samfuran Trojan ɗin ba sa neman wani abu yayin shigar da aikace-aikacen kuma kada ku ƙara ƙararrawa. duk wannan zai kasance daga baya kuma a wani tsari. Kuma duk ayyukan da aka bayyana a hukumance a cikin aikace-aikacen aikace-aikacen, hasken walƙiya yana haskakawa kamar yadda aka alkawarta, an murƙushe katunan.

Yadda yake aiki

Wataƙila, bisa shawarar abokina (a hacked social network account?), kana zazzage wani aikace-aikacen gaba ɗaya mara laifi daga Google Play wanda baya buƙatar komai daga gare ku. a Uganda, 408496 tallace-tallace Kamar yadda na riga na rubuta, aikace-aikacen ba shi da amfani kaɗan, amma yana aiki kamar yadda aka bayyana kuma baya haifar da zato. Bayan haka, Trojan ɗin yana bincika software ɗin da aka sanya akan wayar kuma yana bincika jerin aikace-aikacen banki 160. Bayan gano matches ɗaya ko fiye, yana buɗe sabis da ke gudana a bango kuma ya fara aiwatar da zazzage aikace-aikacen da ya dace daga uwar garken gudanarwa.

Wataƙila, bisa shawarar aboki (asusun sadarwar zamantakewa da aka yi wa hacked?), kuna zazzage aikace-aikacen gabaɗaya mara laifi daga Google Play wanda baya buƙatar wani abu daga gare ku. a Uganda, tallace-tallace 408496 a Uganda, 408496 talla Kamar yadda na riga na rubuta, aikace-aikacen ba shi da amfani kaɗan, amma yana aiki kamar yadda aka bayyana kuma baya haifar da tuhuma. Bayan haka, Trojan ɗin yana bincika software ɗin da aka sanya akan wayar kuma yana bincika jerin aikace-aikacen banki 160. Bayan gano matches ɗaya ko fiye, yana ƙaddamar da sabis ɗin da ke gudana a bango kuma yana fara aiwatar da zazzage aikace-aikacen da ya dace daga uwar garken gudanarwa.Yana buƙatar haƙƙoƙin gudanarwa, yin kama da sabunta tsarin ko sabunta kasuwar Play, bayan karɓar izini, yana jira awanni biyu. Avast ya rubuta cewa dakatarwar ya zama dole don ketare tabbatarwar Google. Bayan zazzage aikace-aikacen daga uwar garken gudanarwa, yana ƙoƙarin shigar da shi ta hanyar daidaitaccen tsari don shigar da aikace-aikacen daga tushen ɓangare na uku. Ya bayyana cewa sigar baya ta wannan trojan na banki ya sami damar samun izini a bayan fage ba tare da sanin mai amfani ba ta hanyar Sabis ɗin Samun damar. A cikin Google, an toshe wannan yuwuwar aikace-aikacen kawai a cikin faɗuwar 2017. Wannan game da shawarar kar a zazzage aikace-aikace daga tushen ɓangare na uku. Kamar yadda ya bayyana, ba a tambaye mu ba. Yanzu (har yanzu?) trojan yana tambaya, amma ba mu sani ba ko akwai wata madogara.

Bayan shigar da aikace-aikacen, Trojan ɗin yana bincika ko an shigar da aikace-aikacen akan na'urar ta gaske ko kuma akan na'urar kwaikwayo na tsarin da labs na riga-kafi ke amfani da shi. Yana aiki akan na'urori na gaske kawai.

Lokacin da aka ƙaddamar da aikace-aikacen banki, Trojan yana maye gurbin shafukan farko da nasa kuma ya karanta bayanan da mai amfani ya shigar. Suna rubuta cewa maye yana faruwa a cikin tsaga na biyu kuma mai amfani ba shi da lokacin lura da wani abu. Tabbacin abubuwa guda biyu baya taimakawa ko dai, Trojan na iya saɓawa, karantawa da aika saƙonnin SMS.

Yadda ake kare kanku

A al'adance, Avast a shafinsa yana lissafta matakan kiyayewa da yakamata a kiyaye. Abin bakin ciki ne cewa yawancin matakan da ke sama ba za su yi aiki a wannan yanayin ba. Kusan kawai alama mai ban tsoro shine sabon saitin haƙƙoƙi da izini don aikace-aikace mai sauƙi. Sannan, waɗannan izini ana buƙatar ba ta “hasken walƙiya” da aka zazzage ba, amma, kamar dai, ta hanyar sabunta tsarin “shigo” ko kuma Google Play Market kanta. To, wani buƙatu don ba da izinin shigar da aikace-aikacen daga tushen ɓangare na uku. Koyaya, idan kwanan nan aka sami nasarar tsallake wannan ƙuntatawa, to ina tabbacin ba za a sami wani madogara ba?

Ba da dadewa ba, kalmar "wawa da kansa" ta shafi yawancin cututtuka, yanzu ban sani ba. Na karanta game da wannan BankBot kuma ban ga sakaci na mai amfani ba, musamman lokacin kamuwa da sigar baya. Ikon aikace-aikacen a gefen Play Market shima baya ajiyewa koyaushe. Antivirus? Wataƙila ba zai cutar da shi ba, sabon “samfurin” na BankBot an gane shi ta riga-kafi. Koyaya, kwanan nan an gaya mini game da Trojan ɗin da ya aika SMS zuwa lambobin da aka biya. Wani fasali mai ban sha'awa: ba za a iya ƙaddamar da riga-kafi guda ɗaya akan wayar salula mai dauke da wannan Trojan ba, da kyar ta zo daidai.

An ba da shawarar kula da bayyanar aikace-aikacen kuma, idan kun ga wani abu da ba a saba gani ba, kar ku yi amfani da shi. Fatan a yi kuskuren aiwatar da canjin ko kuma bankin ya sami nasarar canza ƙirar software? Banal, amma shawara mai tasiri - kada ku yi kasala don karanta sake dubawa kafin saukewa. Ko da muna magana ne game da wasan farko.

Abin nufi shi ne, masu son yin amfani da aikace-aikacen banki, za su samu wata wayar salula ta daban, wacce za su iya shigar da su kawai aikace-aikacen da aka saba amfani da su, ba sa amfani da browser, social networks kuma ba sa bude links kwata-kwata. Haka kuma babu inda za a “haske” lambar wayar katin SIM da aka saka a cikin wannan wayar salula. Kwayoyin cuta suna da wayo sosai. Kuma ina maimaita: 'yan zamba sun kasance koyaushe kuma za su kasance mataki ɗaya a gaban waɗanda ke ƙoƙarin ceton mu. Af, Avast ya rubuta cewa ba a gane sigar da ta gabata na wannan Trojan na dogon lokaci ba kuma ya kasance yana samuwa akan Kasuwar Google Play. Duk da cewa an gina aikin ƙwayoyin cuta a ciki kuma ba a sauke su ba, kamar yadda yake a yanzu, daban bayan shigarwa. Hakanan a lura cewa software ɗin tana da ingantattun hanyoyin da ke hana saurin gano ta. Idan wayar ku ba ta da ɗaya daga cikin aikace-aikacen banki masu rauni, to, Trojan ba zai ma zazzage abubuwan da ke cikin sabar daga uwar garken ba, yana aiki tare da masu sauraron da ake niyya.

A yau, ana iya la'akari da kariya a matsayin haɗakar da hana shigar aikace-aikace daga tushen ɓangare na uku. Wataƙila, ana iya la'akari da shi, kodayake an riga an karya wannan kariyar. Google ne ya rufe wannan lahani na musamman, amma shine kaɗai? Gabaɗaya, lafiya a gare ku da wayoyin hannu, kodayake yana da wahala a kula da rigakafin kowace shekara.