Ondrej Holzman Ke kū nei nā mea hoʻohana ʻole a mālama ʻole iā iOS i nā pōʻino hou aʻe. Hoʻokahi pule wale nō ma hope o ka ʻike ʻO WireLurker malware Ua hoʻolaha ka hui palekana ʻo FireEye ua loaʻa iā ia kahi lua palekana ma iPhones a me iPads hiki ke hoʻouka ʻia me ka hoʻohana ʻana i kahi ʻenehana i kapa ʻia ʻo "Masque Attack". Hiki iā ia ke hoʻohālike a hoʻololi paha i nā noi i loaʻa ma o nā noi hoʻopunipuni ʻekolu a ma hope e loaʻa ai ka ʻikepili mea hoʻohana.
ʻO ka poʻe e hoʻoiho i nā noi i nā polokalamu iOS wale nō ma o ka App Store, ʻaʻole lākou e makaʻu i ka Masque Attack, no ka mea, hana ka polokalamu malware hou i ke ʻano e hoʻoiho ai ka mea hoʻohana i kahi noi ma waho o ka hale kūʻai lako polokalamu, kahi leka uila a i ʻole leka uila. (no ka laʻana, loaʻa kahi loulou download hou o ka pāʻani kaulana ʻo Flappy Bird, e ʻike i ke wikiō ma lalo).
Ke kaomi ka mea hoʻohana i ka loulou hoʻopunipuni, e lawe ʻia lākou i kahi ʻaoʻao pūnaewele e noi ana iā lākou e hoʻoiho i kahi polokalamu e like me Flappy Bird, akā he ʻano hoʻopunipuni maoli nō ia o Gmail e hoʻokomo hou i ka polokalamu kumu i hoʻoiho pono ʻia mai ka App Store. Ke hoʻomau nei ka noi i ke ʻano like, hoʻouka wale ia i kahi lio Trojan iā ia iho, kahi e loaʻa ai nā ʻikepili pilikino a pau mai ia mea. ʻAʻole pili wale ka hoʻouka ʻana iā Gmail, akā, no ka laʻana, nā noi panakō. Eia kekahi, hiki i kēia polokalamu ke komo i ka ʻikepili kūloko maoli o nā noi i holoi ʻia, a loaʻa, no ka laʻana, i ka liʻiliʻi loa i mālama ʻia nā hōʻoia login.
[youtube id =”76ogdpbBlsU” laula=”620″ kiʻekiʻe=”360″]
Hiki i nā mana hoʻopunipuni ke hoʻololi i ka polokalamu kumu no ka mea ua like ko lākou helu ʻike kūʻokoʻa i hāʻawi ʻia e Apple i nā polokalamu, a paʻakikī loa i nā mea hoʻohana ke hoʻokaʻawale i kekahi mai kekahi. Hoʻopaʻa ka mana hoʻopunipuni huna i nā leka uila, SMS, kelepona kelepona a me nā ʻikepili ʻē aʻe, no ka mea, ʻaʻole ʻae ʻo IOS i nā noi me ka ʻike ʻike like.
ʻAʻole hiki iā Masque Attack ke hoʻololi i nā polokalamu iOS paʻamau e like me Safari a i ʻole Mail, akā hiki iā ia ke hoʻouka maʻalahi i ka hapa nui o nā polokalamu i hoʻoiho ʻia mai ka App Store a ʻoi aku ka weliweli ma mua o ka WireLurker i ʻike ʻia i ka pule i hala. Ua pane koke ʻo Apple iā WireLurker a kāohi i nā palapala hōʻoia ʻoihana i hoʻokomo ʻia ai nā noi, akā hoʻohana ʻo Masque Attack i nā helu ʻike kūʻokoʻa e hoʻokomo i nā noi i loaʻa.
Ua ʻike ka ʻoihana palekana FireEye e hana ana ka Masque Attack ma iOS 7.1.1, 7.1.2, 8.0, 8.1 a me 8.1.1 beta, a ua ʻōlelo ʻia ua hōʻike ʻo Apple i ka pilikia i ka hopena o Iulai i kēia makahiki. Eia nō naʻe, hiki i nā mea hoʻohana ke pale aku iā lākou iho i ka pilikia hiki ke maʻalahi - mai hoʻokomo i nā noi ma waho o ka App Store a mai wehe i nā loulou kānalua i nā leka uila a me nā leka uila. ʻAʻole i ʻōlelo ʻo Apple i ka hewa palekana.
He makahiki ʻino ʻo Apple. ʻO nā kelepona maʻalahi, ka hiki ʻole ke kelepona mai ke kelepona, nā lua palekana e like me ka puaʻa, wifi semi-functional ma Yosemite (ʻo ia ke kala o kēlā me kēia hale). ʻAuhea nā lā i hana pono ai ʻo Apple? ʻIke wau, ma mua o ka make ʻana o S. Jobs...
Eia nō naʻe, hiki i nā mea hoʻohana ke pale aku iā lākou iho i ka pilikia hiki ke maʻalahi - mai hoʻokomo i nā noi ma waho o ka App Store a mai wehe i nā loulou kānalua i nā leka uila a me nā leka uila.
ʻAʻole naʻe i hana kēia, no ka mea, inā ua hana, ʻaʻole i loaʻa nā malware a me nā virus i kēia lā :)
ʻAʻole ia i hana no "ka poʻe hoʻolohe ʻole", kahi i piha ai ka Czech Republic, a ʻo ia ke kumu he mea hoʻohenehene wale nā kānāwai a me nā kānāwai alanui no lākou, a ʻo ka hoʻolohe ʻole ʻana i kēia ʻōlelo aʻoaʻo e pili ana i ka lako polokalamu ʻole he ala ia e hele ai. luku. No laila e hana inā ʻaʻole no ka noʻonoʻo ʻino;)
ʻAʻole au e hoʻokomo i nā kānāwai alanui, akā naʻe, ʻaʻole ia i kākau ʻia i mea e palekana ai ko mākou mau alanui, akā no ke kākoʻo ʻana i nā mākaʻi kūloko a kākoʻo i ka loaʻa kālā inā hele ia i ka waihona kālā o ke aupuni :((((
Akā, ʻaʻole ia ke kūkākūkā ma aneʻi :)
ʻOi aku koʻu hoihoi i ka noʻonoʻo o ka poʻe, ʻoi loa mai ka Czech Republic. Inā kūʻai lākou i 1 mau polokalamu no 90 keneta i kēlā me kēia a ʻaʻole lākou i hoʻoiho iā lākou mai nā kumu kumu ʻole a ʻaʻole i hoʻopaʻa paʻahao i kā lākou iPhones, ʻaʻole lākou e uē no ka nalowale ʻana o kā lākou mau mea waiwai :)
ʻOiaʻiʻo, ua hana ʻia kēia pae holoʻokoʻa i ka pane ʻana i ka wānana lapuwale: "mai ka make ʻana o Jobs, holo maikaʻi nā mea āpau, a ʻoi aku hoʻi i kēia makahiki"
ʻAʻole wau makemake i ka hoʻohālikelike. I nā makahiki 2 i hala iho nei, mahalo i koʻu mau hoaaloha, ua paʻa wau i kēia kumuhana a ʻaʻole wau makemake i ka mea e hana nei ma laila a he mea hoʻopailua loa ia i kekahi manawa :(
Ke ʻae aku nei au he huhū paha kaʻu pane i hoʻopuka ʻia ma ka ʻaha kūkā, akā ʻo wau nō, hele pololei wau i ka wahi me ka ʻole o ka ʻuʻuku a ʻaʻohe oʻu makemake e hauʻoli, kākau wale wau i koʻu manaʻo. ʻO ka mea pōʻino, i kekahi manawa ma ke kumukūʻai aʻu i manaʻo ai ua kākau wau i koʻu manaʻo me ka maopopo, akā ʻaʻole maopopo ka poʻe i kaʻu ʻōlelo:
Ua hoʻomaopopo wau i ka hoʻohālikelike i ka noʻonoʻo ma mua, akā ke manaʻo nei wau ʻoi aku ka pololei o kēia hoʻohālikelike hou (e pili ana i ka pahu, akā ʻaʻole nā noi 4x).
Hoʻohui i nā hana: Manaʻo wau e ʻimi nei ʻo Apple i kēia manawa. ʻOiai ʻaʻohe o lākou alakaʻi e like me S.Jobs, ʻaʻole lākou ʻino loa. He nui ka poʻe akamai a naʻauao e hiki ke hana i nā mea hoihoi, akā pono ka manawa. ʻO wau iho, manaʻo wau e hiki ke hoʻohālikelike iā Apple i kēia lā a me Apple me S.Jobs a hiki i 10 mau makahiki ma hope o kona haʻalele ʻana, a hiki i kēlā manawa wale nō ka uē, akā ʻo koʻu manaʻo wale nō ...
ʻAe loa ;)
Ua loaʻa iā lākou nā puka palekana ma mua a ʻoi aku ka nui o kēia ... No ka laʻana, ua hoʻohui lākou i ka papa ASLR ma OSX 10.5, akā ua hoʻohana piha ʻia ma 10.7 wale nō (inā ʻaʻole wau kuhihewa i ka hoʻololi ʻana), e ʻike i ka ʻōlelo a loea palekana ʻo Dino Dai Zovi. E pili ana i nā pōpoki hou, e ʻike i ka ʻike ma Heartbleed, Shell Shock…
ʻO nā pōʻino palekana, ʻo ia, ʻo ia a e lilo ana paha, inā ʻoe e hoʻohana iā Linux, Windows, OSX, Chrome... He manawa wale nō ma mua o ka laha nui ʻana o OSX a i ʻole Linux a lilo kēia mau ʻōnaehana i mea hoihoi i nā mea hana malware, ʻo ʻoe wale nō. ʻAʻole hiki ke pale aku iā ia a inā ʻoe e ʻōlelo he "hewa ʻole" kahi ʻōnaehana (e like me kaʻu i ʻōlelo mua ai e pili ana iā Linux), a laila ke wahaheʻe nei ʻoe i kāu ʻeke ...
Ma ke ala, inā makemake ʻoe e makaʻu, e ʻimi i ka ʻike e pili ana i ka ʻaha kūkā palekana ʻo Black Hat o kēia makahiki a e nānā i nā haʻiʻōlelo e pili ana i nā nāwaliwali o ka firmware USB, he mea pōma kekahi :)
anonymous : ʻO ia ka bullshit hou, hoʻomanaʻo mai iaʻu iā Sobotka. Manaʻo wau e hoʻololi i kahi kahua ʻē aʻe a kāpae iā IOS a me Mac OS ke hala ʻo S.Jobs. A laila e māʻona ʻoe.
A ma ka mea paʻahao loa, hoʻokomo lākou i nā noi mai kahi ʻē aʻe ma mua o ka AppStore?
E hoihoi nō wau i kēlā. No ka mea ʻaʻole wau i ʻike i kaʻu iOS i hiki ke hoʻokomo i kahi noi ma waho o ka AppStore. I ka puka ʻana o "Install" i kēlā wikiō, ʻaʻole au i ʻike.
ʻAe, pono ʻoe e kau inoa i ka palapala noi me kahi palapala Enterprise, a laila hiki ke hoʻokomo ʻia i kēia ala.
ʻAʻole ia e hana me ka ʻole o ka jailbreak. A i ʻole e hoʻouna i ka loulou a e hoʻāʻo wau e hoʻokomo i ka noi ma kaʻu iPhone me ka ʻole jailbreak ma kēia ala.
Ua pololei ʻo Lukas Palda. Hiki nō, akā, liʻiliʻi nā noi ʻenehana a i ʻole lākou hoihoi ʻole ʻaʻole ʻoe i ʻike e pili ana iā lākou, akā hiki nō :)
No laila e hoʻoiho wale iā Storu a ua pau ka pilikia
Aloha a pau ... e like me aʻu a me ka ʻatikala, ua lawa ka hahai ʻana i nā lula kumu, e like me ka hoʻohana ʻana i nā mea ʻē aʻe i pili i ka ʻupena (me ka manaʻo ʻole ʻo iOS, Android, WIN, etc.) = mai kaomi ma luna. nā mea hoʻopili mai nā mea hoʻouna ʻike ʻole ʻia, mai pāʻani i ka hoʻopunipuni a pāʻani i kahi "hacker" ʻike, mai hoʻoiho i nā faila kānalua ... Heluhelu wau i kahi ʻatikala like ma ka "gossip" novinky.cz a inā makemake kekahi e hōʻino i kekahi ʻoihana, e hana lākou. huli i kahi ala...
No ka poʻe e manaʻo nei ua lawa ka loaʻa ʻole o kahi Jailbreak a hoʻokomo wale mai ka AppStore:
http://www.fireeye.com/blog/technical/cyber-exploits/2014/11/masque-attack-all-your-ios-apps-belong-to-us.html
Mai ka paukū: "hiki i nā mea hoʻohana IOS ke pale aku iā lākou iho mai Masque Attacks ma ka hahai ʻana i ʻekolu mau ʻanuʻu: ...".
Hōʻuluʻulu manaʻo: ma hope o ke kaomi ʻana i kahi loulou i ka leka uila a i ʻole sms, hiki ke ʻike ʻia kahi pahu kamaʻilio me ke koho "Install" (a i ʻole Trust Developer) iā ʻoe. ʻO ia ke kumu o kēia pilikia.
Manaʻo paha ʻoe ʻaʻole ʻoe e kaomi i nā loulou, akā ʻo kou mau hoaaloha, ʻohana, etc. ʻAʻole pono lākou e loaʻa ka ʻike IT e like me ʻoe, a no laila pono e aʻo iā lākou ʻaʻole e kaomi ma ka "Install" a pēlā aku.
___
Ua lawe au mai root.cz