Scanners na lambar QR suna satar bayanai daga aikace-aikacen banki na Rasha

Jaridar Kommersant" ta ruwaito cewa kamfanin tsaro na yanar gizo ThreadFabric ya gano wasu manhajoji guda 12 na Android wadanda ke da karfin satar bayanan manhajar banki ta hanyar ketare hanyoyin tsaro na Play Store. Kamfanin ya lura cewa ƙa'idodin suna zazzage abubuwan ɓarna ne kawai lokacin da suke gudana a wasu yankuna, gami da Rasha. Daga cikin bankunan kasar Rasha wadanda cutar ke bibiyar bayanan aikace-aikacensu, akwai Sberbank, Bankin Tinkoff, Uralsib, Bankin Post da kuma bankin OTP. Aikace-aikacen ƙeta suna kwaikwayi daftarin aiki da na'urar sikanin lambar QR.

Masu bincike sun gano rukunoni uku na aikace-aikacen ɓarna bisa la'akari da muggan code ɗin da suke saukewa. Daya daga cikinsu, Anatsa, yana kai hari ga Rasha tare da Amurka, Burtaniya, Austria da sauran kasashe. Aikace-aikacen da ke cikin wannan rukunin an shigar da su sau 200,000, ɗaya daga cikinsu, na'urar daukar hotan takardu ta QR code daga mawallafin QrBarCode LDC, an girka fiye da sau 50,000. ThreatFactor ya lura cewa ƙa'idodin suna aiki daidai kamar yadda aka bayyana kuma sun sami tabbataccen sharhi da yawa akan shafukansu.

Da zarar an shigar da shi, aikace-aikacen cutarwa yana tantance ko za a saukar da kwayar cutar zuwa wayar ko a'a. Idan sharuɗɗan sun yi daidai da wannan, shirin yana tambayar mai amfani don zazzage "sabuntawa" kuma ya ba da izinin shigar da aikace-aikacen da ba a sani ba. A ƙarƙashin sunan sabuntawa, ana zazzage ainihin malicious code, wanda sannan ya nemi izini don ba da cikakkiyar damar shiga wayar. Saboda gaskiyar cewa ana saukar da malicious code daban daga aikace-aikacen, ƙwayoyin cuta suna wucewa idan an buga su a Play Store.

Scanners na lambar QR suna satar bayanai daga aikace-aikacen banki na Rasha

Jaridar Kommersant" ta ruwaito cewa kamfanin tsaro na yanar gizo ThreadFabric ya gano wasu manhajoji guda 12 na Android wadanda ke da karfin satar bayanan manhajar banki ta hanyar ketare hanyoyin tsaro na Play Store. Kamfanin ya lura cewa ƙa'idodin suna zazzage abubuwan ɓarna ne kawai lokacin da suke gudana a wasu yankuna, gami da Rasha. Daga cikin bankunan kasar Rasha wadanda cutar ke bibiyar bayanan aikace-aikacensu, akwai Sberbank, Bankin Tinkoff, Uralsib, Bankin Post da kuma bankin OTP. Aikace-aikacen ƙeta suna kwaikwayi daftarin aiki da na'urar sikanin lambar QR.

Masu bincike sun gano rukunoni uku na aikace-aikacen ɓarna bisa la'akari da muggan code ɗin da suke saukewa. Daya daga cikinsu, Anatsa, yana kai hari ga Rasha tare da Amurka, Burtaniya, Austria da sauran kasashe. Aikace-aikacen da ke cikin wannan rukunin an shigar da su sau 200,000, ɗaya daga cikinsu, na'urar daukar hotan takardu ta QR code daga mawallafin QrBarCode LDC, an girka fiye da sau 50,000. ThreatFactor ya lura cewa ƙa'idodin suna aiki daidai kamar yadda aka bayyana kuma sun sami tabbataccen sharhi da yawa akan shafukansu.

Da zarar an shigar da shi, aikace-aikacen cutarwa yana tantance ko za a saukar da kwayar cutar zuwa wayar ko a'a. Idan sharuɗɗan sun yi daidai da wannan, shirin yana tambayar mai amfani don zazzage "sabuntawa" kuma ya ba da izinin shigar da aikace-aikacen da ba a sani ba. A ƙarƙashin sunan sabuntawa, ana zazzage ainihin malicious code, wanda sannan ya nemi izini don ba da cikakkiyar damar shiga wayar. Saboda gaskiyar cewa ana saukar da malicious code daban daga aikace-aikacen, ƙwayoyin cuta suna wucewa idan an buga su a Play Store.

Scanners na lambar QR suna satar bayanai daga aikace-aikacen banki na Rasha

Jaridar Kommersant" ta ruwaito cewa kamfanin tsaro na yanar gizo ThreadFabric ya gano wasu manhajoji guda 12 na Android wadanda ke da karfin satar bayanan manhajar banki ta hanyar ketare hanyoyin tsaro na Play Store. Kamfanin ya lura cewa aikace-aikacen suna zazzage abubuwan ɓarna ne kawai lokacin da suke gudana a wasu yankuna, gami da Rasha. Daga cikin bankunan kasar Rasha wadanda cutar ke bibiyar bayanan aikace-aikacensu, akwai Sberbank, Bankin Tinkoff, Uralsib, Bankin Post da kuma bankin OTP. Aikace-aikacen ƙeta suna kwaikwayi daftarin aiki da na'urar sikanin lambar QR.

Masu bincike sun gano rukunoni uku na aikace-aikacen ɓarna bisa la'akari da muggan code ɗin da suke saukewa. Tare da Amurka, Burtaniya, Ostiriya da sauran kasashe, daya daga cikinsu, Anatsa, yana kai hari ga Rasha. Aikace-aikacen da ke cikin wannan rukunin an shigar da su sau 200,000, ɗaya daga cikinsu, na'urar daukar hotan takardu ta QR code daga mawallafin QrBarCode LDC, an girka fiye da sau 50,000. ThreatFactor ya lura cewa ƙa'idodin suna aiki daidai kamar yadda aka bayyana kuma sun sami tabbataccen sharhi da yawa akan shafukansu.

Da zarar an shigar da shi, aikace-aikacen cutarwa yana tantance ko za a saukar da kwayar cutar zuwa wayar ko a'a. Idan sharuɗɗan sun yi daidai da wannan, shirin yana tambayar mai amfani don zazzage "sabuntawa" kuma ya ba da izinin shigar da aikace-aikacen da ba a sani ba. A ƙarƙashin sunan sabuntawa, ana zazzage ainihin malicious code, wanda sannan ya nemi izini don ba da cikakkiyar damar shiga wayar. Saboda gaskiyar cewa ana saukar da malicious code daban daga aikace-aikacen, ƙwayoyin cuta suna wucewa idan an buga su a Play Store.

Scanners na lambar QR suna satar bayanai daga aikace-aikacen banki na Rasha

Kommersant Gazeta ta ruwaito cewa kamfanin tsaro na yanar gizo ThreadFabric ya gano wasu manhajoji guda 12 na Android da ke da ikon satar bayanan banki na banki da ke tsallake hanyoyin tsaro na Play Store. Kamfanin ya lura cewa ƙa'idodin suna zazzage abubuwan ɓarna ne kawai lokacin da suke gudana a wasu yankuna, gami da Rasha. Daga cikin bankunan kasar Rasha wadanda cutar ke bibiyar bayanan aikace-aikacensu, akwai Sberbank, Bankin Tinkoff, Uralsib, Bankin Post da kuma bankin OTP. Aikace-aikacen ƙeta suna kwaikwayi daftarin aiki da na'urar sikanin lambar QR.