Cov kws tshawb fawb txog kev ruaj ntseg los ntawm Suav tuam txhab Tencent () chav kawm tshiab ntawm BadPower tawm tsam tsom rau kev kov yeej cov chargers rau smartphones thiab laptops uas txhawb nqa . Qhov kev tawm tsam tso cai rau lub charger xa hluav taws xob ntau dhau uas cov cuab yeej tsis tsim los tswj, uas tuaj yeem ua rau tsis ua haujlwm, melting ntawm qhov chaw, lossis txawm tias hluav taws kub ntawm lub cuab yeej.
Kev tawm tsam yog ua los ntawm tus neeg raug tsim txom lub xov tooj ntawm tes, kev tswj hwm uas tau ntes los ntawm tus neeg tawm tsam, piv txwv li, los ntawm kev siv lub qhov tsis zoo lossis kev taw qhia ntawm malware (lub cuab yeej ib txhij ua raws li qhov chaw thiab lub hom phiaj ntawm kev tawm tsam). Cov txheej txheem tuaj yeem siv los ua kom lub cev puas tsuaj rau cov cuab yeej uas twb muaj lawm thiab ua rau muaj kev puas tsuaj uas tuaj yeem ua rau hluav taws. Qhov kev tawm tsam no muaj feem xyuam rau cov chargers uas txhawb nqa firmware hloov tshiab thiab tsis txhob siv download code pov thawj siv tus kos npe digital. Chargers uas tsis txhawb flashing yog tsis raug rau tua. Qhov loj ntawm kev puas tsuaj yog nyob ntawm tus qauv ntawm lub charger, lub zog tso zis thiab muaj cov txheej txheem tiv thaiv overload hauv cov khoom siv raug them.
USB fast charging raws tu qauv qhia txog cov txheej txheem ntawm kev sib piv cov nqi them nrog cov cuab yeej raug them. Cov cuab yeej raug them xa cov ntaub ntawv mus rau lub charger hais txog cov kev txhawb nqa thiab kev lees paub qhov hluav taws xob (piv txwv li, tsis yog 5 volts, nws tau tshaj tawm tias nws tuaj yeem txais 9, 12 lossis 20 volts). Lub charger tuaj yeem saib xyuas qhov tsis sib xws thaum them nyiaj, hloov lub sijhawm them nqi thiab kho qhov voltage nyob ntawm qhov kub thiab txias.
Yog hais tias lub charger paub meej tias qhov tsis zoo siab dhau los lossis hloov pauv rau tus lej tswj kev them nyiaj, lub charger yuav tsim cov nqi them uas tsis tau tsim. Lub BadPower txoj kev tawm tsam cuam tshuam nrog kev puas tsuaj rau lub firmware lossis thauj cov firmware hloov kho mus rau lub charger, uas teeb tsa qhov siab tshaj plaws tau. Lub hwj chim ntawm chargers yog loj hlob sai thiab, piv txwv li, Xiaomi Lub hlis tom ntej los tso tawm cov cuab yeej txhawb nqa 100W thiab 125W ceev them thev naus laus zis.
Ntawm 35 lub adapters them ceev ceev thiab cov roj teeb sab nraud (Power Banks) kuaj los ntawm cov kws tshawb fawb, xaiv los ntawm 234 qauv muaj nyob hauv khw, qhov kev tawm tsam tau siv rau 18 cov khoom tsim los ntawm 8 lub tuam txhab. Kev tawm tsam ntawm 11 ntawm 18 cov khoom siv teeb meem tau ua tau nyob rau hauv hom tsis siv neeg tag nrho. Hloov cov firmware ntawm 7 cov khoom siv yuav tsum muaj kev tswj xyuas lub cev ntawm lub charger. Cov kws tshawb fawb tau xaus lus tias qhov kev nyab xeeb ntawm qib tsis yog nyob ntawm cov txheej txheem them sai sai siv, tab sis tsuas yog cuam tshuam nrog lub peev xwm los hloov kho cov firmware ntawm USB thiab siv cov txheej txheem cryptographic rau kev txheeb xyuas cov haujlwm nrog lub firmware.
Qee lub chargers raug flashed ntawm tus qauv USB chaw nres nkoj thiab tso cai rau koj hloov kho lub firmware los ntawm lub xov tooj smartphone lossis lub laptop uas raug mob yam tsis tas siv cov cuab yeej tshwj xeeb thiab muab zais los ntawm tus tswv ntawm lub cuab yeej. Raws li cov kws tshawb fawb, kwv yees li 60% ntawm kev them nyiaj ceev ceev ntawm kev ua lag luam tso cai firmware hloov tshiab ntawm USB chaw nres nkoj hauv cov khoom kawg.
Feem ntau ntawm cov teeb meem cuam tshuam nrog BadPower attack thev naus laus zis tuaj yeem kho tau ntawm qib firmware. Txhawm rau thaiv qhov kev tawm tsam, cov tuam txhab tsim cov teeb meem chargers tau hais kom ntxiv dag zog tiv thaiv kev hloov pauv tsis tau tso cai ntawm firmware, thiab cov neeg tsim khoom siv cov khoom siv los ntxiv cov txheej txheem kev tswj hwm ntau dhau. Cov neeg siv tsis raug pom zoo kom siv cov adapters nrog Type-C los txuas cov khoom siv ceev ceev rau cov xov tooj smartphones uas tsis txhawb hom no, vim tias cov qauv zoo li no tsis tshua muaj kev tiv thaiv los ntawm kev muaj peev xwm overloads.
Tau qhov twg los: opennet.ru