Masu damfara na Intanet suna yin kutse ga masu aikin hannu don isa ga lambobin wayar masu biyan kuɗi

Masu damfara na Intanet suna yin kutse ga masu aikin hannu don isa ga lambobin wayar masu biyan kuɗi
Kwamfuta masu nisa (RDP) abu ne mai dacewa lokacin da kake buƙatar yin wani abu akan kwamfutarka, amma ba ka da ikon zama a gabansa. Ko kuma lokacin da kuke buƙatar samun kyakkyawan aiki yayin aiki daga tsohuwar na'ura ko mara ƙarfi. Mai ba da girgije Cloud4Y yana ba da wannan sabis ɗin ga kamfanoni da yawa. Kuma ba zan iya yin watsi da labarin ba game da yadda ’yan damfara masu satar katin SIM suka tashi daga ba da iznin ma’aikatan kamfanin sadarwa zuwa amfani da RDP don samun damar shiga bayanan ciki na T-Mobile, AT&T da Sprint.

Masu damfara ta Intanet (wanda zai yi shakkar kiran su da hackers) suna ƙara tilasta wa ma’aikatan kamfanonin wayar hannu yin amfani da software da ke ba su damar kutsawa cikin rumbun adana bayanai na kamfanin tare da satar lambobin wayar masu biyan kuɗi. Wani bincike na musamman da Mujallar Motherboard ta yanar gizo ta gudanar kwanan nan ya baiwa 'yan jarida damar cewa an kai hari a kalla kamfanoni uku: T-Mobile, AT&T da Sprint.

Wannan juyin juya hali ne na gaske a fagen satar katin SIM (an sata su ne don masu zamba su yi amfani da lambar wayar wanda aka azabtar don samun damar shiga imel, cibiyoyin sadarwar jama'a, asusun cryptocurrency, da sauransu). A baya, masu zamba za su ba wa ma’aikatan kamfanin cin hanci don musanya katin SIM ko amfani da injiniyan zamantakewa don yaudarar bayanai ta hanyar nuna a matsayin abokin ciniki na gaske. Yanzu suna yin rashin kunya da rashin kunya, suna yin kutse cikin tsarin IT na masu aiki tare da aiwatar da zamba da kansu.

An tayar da sabuwar zamba a watan Janairun 2020 lokacin da wasu Sanatocin Amurka da dama suka tambayi Shugaban Hukumar Sadarwa ta Tarayya Ajit Pai abin da kungiyarsa ke yi don kare masu sayayya daga ci gaba da hare-haren. Kasancewar wannan ba tsoro bane fanko yana tabbatar da kwanan nan kasuwanci game da satar dala miliyan 23 daga asusun crypto ta hanyar musayar SIM. Wanda ake zargin Nicholas Truglia mai shekaru 22, wanda ya yi fice a shekarar 2018 saboda nasarar yin kutse a wayoyin hannu na wasu fitattun mutane Silicon Valley.

«Wasu talakawan ma'aikata da manajoji ba su da cikakkiyar fahimta kuma ba su da masaniya. Suna ba mu damar samun duk bayanan kuma mu fara sata“, daya daga cikin maharan da ke da hannu wajen satar katin SIM, ya shaida wa wata mujalla ta yanar gizo a kan rashin bayyana sunansa.

Ta yaya wannan aikin

Masu satar bayanai suna amfani da damar Nesa Tsarin Lantarki (RDP). RDP yana bawa mai amfani damar sarrafa kwamfutar kusan daga kowane wuri. A matsayinka na mai mulki, ana amfani da wannan fasaha don dalilai na zaman lafiya. Misali, lokacin da goyan bayan fasaha ke taimakawa saita kwamfutar abokin ciniki. Ko lokacin aiki a cikin kayan aikin girgije.

Amma maharan kuma sun yaba da iyawar wannan manhaja. Makircin ya yi kama da sauki: dan damfara, mai kama da ma'aikacin tallafi na fasaha, ya kira wani talaka kuma ya sanar da shi cewa kwamfutarsa ​​ta kamu da software mai hatsari. Don magance matsalar, dole ne wanda aka azabtar ya ba da damar RDP kuma ya bar wakilin sabis na abokin ciniki na karya a cikin motar su. Sannan lamari ne na fasaha. Mai zamba yana samun damar yin duk abin da zuciyarsa ke so da kwamfutar. Kuma yawanci tana son ziyartar banki ta yanar gizo ta saci kuɗi.

Abin ban dariya ne yadda ’yan damfara suka karkata akalarsu daga talakawa zuwa ma’aikatan kamfanonin sadarwa, suna lallashe su su sanya ko kunna RDP, sannan su yi ta zage-zage da girman abubuwan da ke cikin rumbun adana bayanai, suna satar katin SIM na masu amfani da su.

Irin wannan aikin yana yiwuwa, tunda wasu ma'aikatan afaretan wayar hannu suna da haƙƙin "canja wurin" lambar waya daga katin SIM ɗaya zuwa wani. Lokacin da aka musanya katin SIM, ana canja lambar wanda aka azabtar zuwa katin SIM wanda mai zamba ke sarrafawa. Sannan yana iya karɓar lambobin tabbatarwa mai abubuwa biyu ko bayanan sake saitin kalmar sirri ta hanyar SMS. T-Mobile tana amfani da kayan aiki don canza lambar ku QuickView, AT&T yana da Opus.

A cewar daya daga cikin ‘yan damfara da ‘yan jarida suka samu damar tattaunawa da su, shirin na RDP ya samu karbuwa sosai. Splashtop. Yana aiki tare da kowane ma'aikacin sadarwa, amma ana amfani dashi sau da yawa don kai hari akan T-Mobile da AT&T.

Wakilan masu aiki ba sa musun wannan bayanin. Don haka, AT&T ya ce suna sane da wannan takamaiman shiri na kutse kuma sun dauki matakin hana afkuwar irin haka nan gaba. Wakilan T-Mobile da Sprint suma sun tabbatar da cewa kamfanin yana sane da hanyar satar katin SIM ta hanyar RDP, amma saboda dalilan tsaro ba su bayyana matakan kariya da aka dauka ba. Verizon bai yi tsokaci kan wannan bayanin ba.

binciken

Wadanne sakamako za a iya cimma daga abin da ke faruwa, idan ba ku yi amfani da maganganun batsa ba? A gefe guda, yana da kyau cewa masu amfani sun zama masu hankali, tun da masu laifi sun canza zuwa ma'aikatan kamfanin. A gefe guda, har yanzu babu tsaro na bayanai. A Habré da sauran shafuka zamewa ta labarai game da ayyukan zamba da aka yi ta hanyar maye gurbin katin SIM. Don haka hanya mafi inganci don kare bayanan ku ita ce kin samar da su a ko'ina. Kaico, yana da wuya a yi wannan.

Me kuma za ku iya karantawa akan blog? Cloud4Y

Kwayoyin cuta masu jure CRISPR suna gina "matsuguni" don kare kwayoyin halitta daga enzymes masu shiga DNA
Ta yaya bankin ya gaza?
The Great Snowflake Theory
Intanet akan balloons
Pentesters a sahun gaba na tsaro ta yanar gizo

Kuyi subscribing din mu sakon waya- tashar, don kada ku rasa labarin na gaba! Ba mu rubuta fiye da sau biyu a mako ba kuma akan kasuwanci kawai.

source: www.habr.com

Add a comment