Doctor Web yayi gargadin cewa masu mallakar na'urorin hannu masu amfani da tsarin Android na fuskantar barazanar sabon malware - Android.FakeApp.174 Trojan.
Malware yana ɗaukar shafukan yanar gizo masu ban sha'awa a cikin burauzar Google Chrome, inda masu amfani ke biyan kuɗin sanarwar talla. Masu kai hari suna amfani da fasahar Push ta Yanar Gizo, wanda ke ba da damar shafuka don aika sanarwa ga mai amfani tare da izinin mai amfani, koda lokacin da madaidaitan shafukan yanar gizon ba a buɗe su a cikin burauzar gidan yanar gizo ba.
Fadakarwar da aka nuna suna tsoma baki tare da gogewar na'urar Android. Haka kuma, ana iya kuskure irin waɗannan saƙonnin da saƙon da suka dace, wanda zai kai ga satar kuɗi ko bayanan sirri.
Ana rarraba trojan Android.FakeApp.174 a ƙarƙashin tsarin shirye-shirye masu amfani, misali, software na hukuma daga sanannun samfuran. An riga an ga irin waɗannan aikace-aikacen a cikin shagon Google Play.
Lokacin da aka ƙaddamar da malware, malware yana loda gidan yanar gizo a cikin mashigin Google Chrome, adireshin wanda aka ƙayyade a cikin saitunan aikace-aikacen ɓarna. Daga wannan rukunin yanar gizon, daidai da sigoginsa, ana yin turawa da yawa ɗaya bayan ɗaya zuwa shafukan shirye-shiryen haɗin gwiwa daban-daban. A kan kowannensu, ana tambayar mai amfani don ba da izinin karɓar sanarwa.
Bayan kunna biyan kuɗi, shafuka suna fara aika wa mai amfani sanarwa da yawa na abubuwan da ba su da tabbas. Suna isowa ko da an rufe mai binciken kuma an riga an cire Trojan ɗin kansa, kuma an nuna su a cikin yanayin yanayin tsarin aiki.
Saƙonni na iya zama na kowane yanayi. Waɗannan na iya zama sanarwar karya game da karɓar kuɗi, talla, da sauransu. Lokacin danna irin wannan saƙon, ana tura mai amfani zuwa rukunin yanar gizon da ke da abubuwan da ba su da tabbas. Waɗannan tallace-tallace ne na casinos, masu yin bookmaker da aikace-aikace daban-daban akan Google Play, tayin rangwame da takaddun shaida, binciken karya akan layi, zanen kyaututtuka na almara, da sauransu. Bugu da ƙari, ana iya tura wadanda abin ya shafa zuwa albarkatun phishing da aka ƙirƙira don satar bayanan katin banki.
source: 3dnews.ru