Google ya gano kuma ya toshe sabon aikace-aikacen da zasu iya cutarwa (PHA) mai suna Tizi, dangin bayan gida tare da iyawar rooting wanda aka yi amfani da shi wajan kaiwa hari kan na'urorin Android a kasashen Afirka, musamman: Kenya, Nigeria, da Tanzania.
Tizi ƙofa ce ta baya wacce ke girka malware akan na'urorin Android kuma yana satar bayanai masu mahimmanci daga bayanan martaba na masu amfani da su. Da Google Play Kare tsaro kungiyar ta fara gano kayan leken asiri ne a watan Satumbar 2017 ta hanyar binciken na'urar kare Google Play. Sun sami wani kayan aikin trojan da ake kira MyTizi wanda aka girka a na'urar Android wanda ke amfani da tsoffin lahani tare da damar rooting. A kan zurfafa zurfafawa, ƙungiyar ta sami ƙarin aikace-aikacen da Tizi ke kamuwa da ita, mafi tsufa daga cikinsu shine daga Oktoba 2015.
A cewar Google, na'urori 1300 ne suka kamu da cutar ta Tizi kuma ire-iren wadannan masu mallakar PHA suna sa ido ne kan karamin kuma takamaiman adadin masu amfani don cimma burinsu da kuma kashe wasu lokuta masu yawa da kudi don kirkirar da girka irin wannan kayan leken asiri.
Yaya Tizi yake Aiki?
Tizi farko tushen na'urar tare da CVE-2012-4220, CVE-2013-2596, CVE-2013-2597, CVE-2013-2595, CVE-2013-2094, CVE-2013-6282, CVE-2014-3153, CVE-2015-3636, CVE -2015-1805 masu rauni.
Bayan haka yana satar bayanai masu mahimmanci daga shahararrun hanyoyin sada zumunta kamar su Facebook, Twitter, WhatsApp, Viber, Skype, LinkedIn, da Telegram kamar
- Rikodin kira daga WhatsApp, Viber, da Skype
- Aika da karɓar saƙonnin SMS
- Picturesauki hotuna ba tare da nunawa akan allon ba
- Yin rikodin sauti na yanayi ta cikin makirufo
- Samun dama ga lambobi, abubuwan kalanda, rajistan ayyukan kira, hotuna, maɓallan ɓoye Wi-Fi, da jerin duk aikace-aikacen gida da aka girka.
Bayan yin rikodin bayanan, to aika haɗin GPS na na'urar ta hanyar SMS zuwa umarnin sa da kuma sabobin sarrafawa. Daga baya, ana yin sadarwa ta C & C ta hanyar HTTPS, ko ta hanyar yarjejeniyar MQTT.
Ayyukan Google:
Lokacin da Google ta fahimci wannan kayan leken asiri, nan take ta kashe aikace-aikacen da suka kamu da cutar ta Tizi akan na'urorin da abin ya shafa ta hanyar Google Play Protect sannan kuma ta sanar da masu amfani da abin. Kamfanin ya gano masu kirkirar app din Tizi wadanda ke tallata girka manhajojin da suka kamu da cutar daga Google Play Store akan gidan yanar gizon su da kafofin sada zumunta. Daga ƙarshe, ƙungiyar ta dakatar da asusun masu haɓaka daga Play.
Hakanan ya sabunta ayyukan tsaro na kamfanin tare da bayanan daga aikace-aikacen Tizi.
Taya zaka Kare Na'urarka ta Android Daga Tizi Spyware?
Rigakafin ya fi magani. Ana ba da shawarar koyaushe don yin taka tsantsan kafin wasu kayan leken asiri su farma wayarku kuma ku jira Google don gyara batun. Zaka iya kare na'urarka ta Android daga Tizi tare da matakai masu zuwa:
- Koyaushe kiyaye na'urarka ta zamani tare da sabbin facin tsaro.
- Bincika kowane izini mara dalili kafin girka app.
- Kunna makullin allo kamar PIN, abin kwaikwaya, ko kalmar wucewa don kaucewa samun izini mara izini.
- Bi sawun wayoyinku.
- Tabbatar da an kunna Google Play Protect.
Google ya ce kayan leken asiri na iya amfani da tsofaffin na'urorin Android kawai kuma “Dukkanin lahanin da aka lissafa an tsaresu akan na'urori masu matakan tsaro na watan Afrilu na 2016 ko kuma daga baya, kuma galibinsu an yiwa faci sosai kafin wannan ranar. Idan aikace-aikacen Tizi ba zai iya karɓar iko da na'urar ba saboda ƙarancin abubuwan da yake ƙoƙarin amfani da su duk an toshe, zai ci gaba da ƙoƙari ya aiwatar da wasu ayyuka ta hanyar mahimman matakan izini da ta nemi mai amfani da shi ya ba ta, galibi game da karatu da aika sakonnin SMS da lura, turawa, da hana kiran waya masu fita. ”
