Ondrej Holzman Bilawga usbuuca waxay ahayd in la xalliyo Apple arrinta ugu weyn ee ammaanka ee App Store ilaa maantadan la joogo. Bakhaarkeeda codsiyada iPhones iyo iPads-ka waxaa haleelay malware-ka xaasidka ah kaas oo ururin kara xogta isticmaalaha dhowr iyo toban codsi. Apple waxay si degdeg ah u saartay barnaamijyadii cudurka qaba, laakiin waxaan ku talinaynaa in dhammaan isticmaalayaasha ay ka tirtiraan software-ka gaarka ah qalabkooda.
Apps-ka uu ku dhacay malware-ku waxa ay soo galeen App Store iyaga oo u sii maray horumariyeyaal Shiinees ah oo isticmaalay nooca beenta ah ee qalabka horumarinta ee Xcode. XcodeGhost waxay isticmaashaa noocyada hore ee Xcode iyo horumariyayaashu xitaa ma dareemi doonaan soo galitaanka koodka xaasidnimada ah. Xitaa jeeg kale oo sax ah oo ku jira App Store ma dareemin.
Nooca xaasidnimada leh ee Xcode ayaa diyaar u ahaa in lagala soo degsado golayaasha Shiinaha, taasoo u sahlaysa horumariyeyaasha halkaas si ay u helaan software-ka. Mashiinka raadinta Shiinaha ee Baidu, marka uu raadinayo "xcode 6.4 download" ee hortooda adeegayaasha rasmiga ah ee Apple, isla markiiba wuxuu helayaa afar gole oo kala duwan halkaas oo nooca Xcode aan rasmi ahayn (iyo xaaladahan xaasidnimo) laga soo dejisan karo.
Dhibaatadu sidoo kale waa isku xirka internetka ee Shiinaha, kaas oo u muuqda mid aad u gaabis ah, iyo guud ahaan Shiinuhu xannibay server-yada ajnabiga ah. Helitaanka bogga rasmiga ah ee Apple si loo soo dejiyo Xcode had iyo jeer ma fududa dalkan. Oo maadaama Xcode uu yahay codsi gigabyte badan, horumariyayaashu waxay raadinayaan habka ugu fudud ee lagu heli karo.
Isla marka abka leh XcodeGhost uu soo galo aaladda iOS, wuxuu bilaabaa ururinta dhammaan xogta suurtogalka ah ee gadaasha. Waxay soo dejisaa macluumaadka ku saabsan codsiyada, aaladda, ku saabsan goobta, luqadda, macluumaadka shabakadda, iwm. Marka ay hesho xogta, waxay u dirtaa server-ka dibadda iyo sida waafaqsan. Palo Alto Networks Waxa kale oo ay heli kartaa amarrada fog.
Aragti ahaan, tusaale ahaan, waxay bilaabi kartaa mareegaha ama waxay ku siin kartaa tilmaamo been abuur ah si aad u geliso aqoonsiga Apple iyo eraygaaga sirta ah. XcodeGhost xitaa waxa uu geli karaa waxa ku jira kilibboodhkaaga oo waxa uu xadi karaa furaha sirta ah.
Nasiib wanaag, inta badan codsiyada cudurka qaba waxay ka yimaadaan Shiinaha, markaa kama heli doonno wax codsiyo ah oo caan ah liiska hoose. Si kastaba ha ahaatee, Shiinaha, tusaale ahaan, WeChat waxay leedahay boqollaal kun oo isticmaaleyaal ah, markaa khatarta ammaanku waa mid weyn. Weli, waa fikrad wanaagsan inaad dhex marto apps-kaaga oo haddii aad hesho tabar, ka tirtir iPhone-kaaga ama iPad-kaaga.
Waa qiyaas ka hortag ah sababtoo ah inkasta oo ay ku jirto liiska Palo Alto Networks way is heleen iyo tusaale ahaan Shimbiraha Angry Birds 2 ee caanka ah, istuudiyaha horumarinta Rovio waxa uu xaqiijiyay in dhibaatada amnigu ay khusayso oo keliya noocyada qaar ee ciyaarta caanka ah, gaar ahaan kan Shiinaha. Wadamada kale, Angry Birds wali waxay ku jiraan App Store mana aha inay waxyeello u geystaan isticmaalayaasha sinaba. Si kastaba ha ahaatee, lama hubo in la mid ah codsiyada kale, sidaas darteed waxaan ku talinaynaa in la tirtiro ugu yaraan wakhtiga la joogo.
Hoos waxaa ku qoran liiska abka aan ku talineyno in la tirtiro sababtoo ah XcodeGhost:
- Didi Chuxing
- Shimbiraha careysan 2
- NetEase
- Kanaalka Micro
- IFlyTek wax ku dar
- Tareenka 12306
- jikada The
- Kaarka Badbaadada
- CITIC Bank booska kaarka lagu wareejiyo
- Xafiiska Unicom ee Shiinaha Unicom
- Khariidad sare oo Jarmal ah
- Jane buug
- Indho Ballaaran
- Nolosha nolosha
- mara mara
- Daawo xoog ah
- Himalayas
- Biilka jeebka
- radi
- Degdeg ah ayaa weydiisay dhaqtarka
- Isbuuc dhammaad caajis ah
- Kaamirada microblogging
- Akhriska Watercress
- CamScanner
- CamCard
- QaybtaFault
- Kaydka ayaa furan fasalka
- Suuqa saamiyada kulul
- Saddex guddi cusub
- Darawalku wuu dhacayaa
- Ciyaartoyga
- Mercury
- WinZip
- Musical.ly
- PDFReader
- Kaamil365
- PDFReader Free
- WhiteTile
- IHexine
- WinZip Standard
- MoreLikers2
- CamScanner Lite
- Tigidhada mobilada
- iVMS-4500
- OPlayer Lite
- QYER
- kubbadda cagta
- Xarago
- Golfsensehd
- Wallpapers10000
- CSMBP-AppStore
- MSL108
- TinyDeal.com
- koobiga qabso
- iOBD2
- PocketScanner
- CuteCUT
- AmHexinForPad
- SuperJewelsQuest2
- air2
- InstaFollower
- CamScanner Pro
- hag
- WeLoop
- Xog-haye
- MSL070
- gabar fiican
- immmtdchs
- Ciyaartoyga
- FlappyCircle
- BiyoQingBao
- SaveSnap
- Guitar Master
- jin
- Qaybta WinZip
- Keyd degdeg ah
Ilaahay dartiis, shinbiraha cadhooday ma isticmaali karaan wax sidan oo kale ah?
Waxaan fahamsanahay in ay ku saabsan tahay xawaaraha internetka iyo XCode runtii waa faras, ma fahmin inay yihiin kuwo doqon ah oo marka GateKeeper soo baxo, ma ogaanayaan in ay wax khaldan yihiin ... Haddii kaliya GateKeeper ma dhihin waa codsi nacas ah, markaa waan fahmay wax yar, laakiin daaqada ayaa soo baxday!
Runtii maskaxda ayay ka guuxaysaa. Laakin xitaa lama yaabin tayada ay shirkadaha Shiinaha qaarkood ka xishoon waayeen soo saarista iyo iibinta ;-)
Kuwani runtii waa hiwaayadda cajiibka ah. Sidee horumariyayaashu ugu daabacan karaan AppStore u isticmaali karaan XCode laga soo dejiyay serfarka Shiinaha ee dahsoon. Ma fahmin taas..
Wax la mid ah ma geli karo AppStore-ka ka dib :D