pane zvaunoziva nezvazvo PhantomLance Backdoor? Boka revatsotsi vanga vachishandisa Google Play kugovera malware anga achishandiswa kuba data yakavanzika kubva mukupera kwa2016.
Kaspersky Laboratories yakagovera rondedzero yakadzama pamusoro pePhantomLance Trojan backdoor, inonzi yakaomesesa fomu yemalware, iyo isina kuoma chete kuona asiwo yakaoma kuferefeta.
Mapurogiramu eGoogle Play Store akatapukirwa nePhantomLance Backdoor anga achiba data kubva 2016
Kaspersky anoshuma kuti iyo malware inogona kuwana ruzivo rwese pane ine hutachiona smartphone:
Chinangwa chikuru chePhantomLance ndechekutora ruzivo rwakadzama kubva kumudziyo weakabatwa. Iyo malware inogona kupa vateresi vayo data renzvimbo, kufona matanda, mameseji mameseji, rondedzero yeakaiswa maapplication, uye ruzivo rwakakwana nezve nharembozha ine hutachiona.
Uyezve, kushanda kwayo kunogona kuwedzerwa chero nguva nekungoisa mamwe mamodule kubva kuC&C server.
Malware muGoogle Play maapuro
Munguva yekuferefeta, iyo malware yakawanikwa mumapurogiramu akakurumbira uye zvishandiso zvinobvumira vashandisi kuchinja mafonti, kubvisa kushambadza, uye kuita kuchenesa system. Vagadziri kuseri kwezvishandiso izvi vakakwanisa kupfuura chero cheki chekuchengetedza paGoogle Play Store nekutanga neasina hutsinye vhezheni yemaapp avo.
Pakangoburitswa maapplication, vakakwanisa kuwedzera huipi gare gare kuburikidza nekuvandudza, izvo Google Play Store haina kudzora. Vagadziri vakakwanisawo kugadzira akasiyana profiles paGitHub kuita seanovimbika ekusimudzira masosi.
Zvinangwa zvikuru zvePhantomLance zvinonzi vanga vari vashandisi muVietnam. Nekudaro, maapplication ane hutachiona akatorwawo kune dzimwe nzvimbo dzepasi. Iyo Trojan yakabatanidzwa neboka rinonzi OceanLotus, iro rine nhoroondo yezvakafanana malware kurwiswa padesktop inoshanda masisitimu. Aya mapoka anowanzo tsigirwa nevakuru vakuru uye kunyange hurumende.
Kunyangwe Google yakabvisa maapplication aya kubva kuPlay Store, achiri kuwanikwa online pane akasiyana APK ekurodha mawebhusaiti uye zvimwe zvechitatu-bato zvitoro.
Zvinotaridza kuti kunyangwe ukangoisa maapuro kubva kuGoogle Play Store, haisati yakachengeteka kunze kwekunge iwe waratidza huchokwadi hwevagadziri. Kutsvaga kwekukurumidza kweGoogle kunogona kuratidza ruzivo rwakawanda rwechokwadi nezvevagadziri, uye kana chimwe chinhu chichiita sechisina chokwadi mumhedzisiro yekutsvaga, dzivirira maapplication akadaro.
Iyo yakavhurika hunhu hwe Android inogona zvakare kushanda ichipokana nazvo, sezvo chero munhu anogona kungosaina kuGoogle Play Store uye kutumira app ine hutsinye.
Izvi zvichiri kutyisa kune inonyanya kufarirwa pasi rose system, ingave desktop kana nharembozha. Android inoshandiswa pazvishandiso zvinosvika mabhiriyoni 2.500 pasi rose, uye Google yakaramba ichitadza kupa vimbiso yakakwana yekuvanzika uye yekuchengetedza kune vashandisi kune maapplication anogoverwa kuburikidza nemusika wayo wepamutemo.
Kana iwe uchifarira iyo tekinoroji yemashandiro anoita iyo malware uye tsvagiridzo yakaitwa kuseri kwezviitiko neKaspersky Labs, verenga yavo yakadzama rondedzero pano.