Google Project Zero, wani mai bincike kan tsaro, ya ba da rahoton gano daya daga cikin manyan hare-hare kan masu amfani da iPhone ta hanyar amfani da gidajen yanar gizon da ke rarraba software mara kyau. Rahoton ya bayyana cewa gidajen yanar gizon sun yi allurar malware a cikin na'urorin duk maziyartan, wanda adadinsu ya kai dubu da dama a mako.
“Babu takamaiman mayar da hankali. Ziyartar rukunin yanar gizo kawai ya isa ga uwar garken amfani don ƙaddamar da hari akan na'urarka, kuma idan ta yi nasara, shigar da kayan aikin sa ido. Mun kiyasta cewa dubban masu amfani ne ke ziyartan wadannan rukunin yanar gizon kowane mako, ”in ji kwararre na Google Project Zero Ian Beer a cikin wani sakon bulogi.
Rahoton ya ce wasu daga cikin hare-haren sun yi amfani da abin da ake kira rashin amfani da rana. Wannan yana nufin cewa an yi amfani da raunin da masu haɓaka Apple ba su sani ba, don haka suna da "kwanakin sifili" don gyara shi.
Ian Beer ya kuma rubuta cewa Rukunin Binciken Barazana na Google ya sami damar gano sarƙoƙi iri-iri na iPhone guda biyar, dangane da lahani 14. An yi amfani da sarƙoƙin da aka gano don kutse na'urorin da ke amfani da dandamalin software daga iOS 10 zuwa iOS 12. Kwararrun Google sun sanar da kamfanin Apple game da gano su kuma an gyara raunin da ya faru a cikin Fabrairu na wannan shekara.
Mai binciken ya ce bayan an samu nasarar kai hari kan na’urar da aka yi amfani da ita, an rarraba malware, wanda galibi ana amfani da shi wajen satar bayanai da kuma nadar bayanan wurin da na’urar take a ainihin lokacin. "Kayan aikin sa ido yana neman umarni daga umarni da uwar garken sarrafawa kowane sakan 60," in ji Ian Beer.
Ya kuma lura cewa malware din na da damar yin amfani da kalmomin sirri da aka adana da kuma bayanan bayanan aikace-aikacen sakonni daban-daban, wadanda suka hada da Telegram, WhatsApp da iMessage. Sirri na ƙarshe zuwa ƙarshe da aka yi amfani da shi a cikin irin waɗannan aikace-aikacen na iya kare saƙonni daga shiga tsakani, amma matakin kariya yana raguwa sosai idan maharan sun sami nasarar lalata na'urar ta ƙarshe.
"Idan aka ba da adadin bayanan da aka sace, maharan na iya ci gaba da samun dama ga asusu da ayyuka daban-daban ta hanyar amfani da alamun sata na sata ko da bayan rasa damar yin amfani da na'urar mai amfani," Ian Beer ya gargadi masu amfani da iPhone.
source: 3dnews.ru