Haɗarin Motsi

Batun ƙwayoyin cuta ta wayar hannu ba abin burgewa bane. Duk da haka, wajibi ne a rubuta game da shi kuma an ba da shawarar sosai don karanta shi. Sai dai idan ba shakka, za ku ciyar da "kawun wani" daga ma'auni na asusun ku.

Shekaru biyu da suka gabata, kusan kowa ba ya ɗaukar ainihin manufar "virus ta hannu" da muhimmanci. Ee, akwai wasu sana'o'i daban-daban waɗanda za a iya ɗaukar su azaman ƙwayoyin cuta, amma yaduwar su ba ta da kyau, kuma duk yana kama da jin daɗin masu shirye-shirye marasa lahani. Akwai ma wani ra'ayi cewa masu haɓaka hanyoyin rigakafin riga-kafi ne suka ƙirƙira barazanar wayar hannu don haɓaka samfuran su. Ƙoƙarin farko na rubuta "malware ta hannu" ya rasa babban direba: sha'awar kuɗi na masu haɓakawa. Yanzu duk wannan sharrin wayar hannu ya koyi daidai don "sami" kuɗi don masu ƙirƙira shi ta duk abubuwan cikin wayar hannu iri ɗaya. Wanne ya daɗe ya zama babban kayan aiki da tsaka-tsakin hanyar haɗin kai don yawancin ayyukan aikata laifuka a cikin "space mobile"

Ba masu amfani kawai ke fama da zamba ta wayar hannu ba. Rashin aikin fasaha na tsarin lissafin kuɗi yana ba da damar masu zamba su "madara" dubban rubles daga kowane katin SIM da aka saya musamman don wannan. Rabin wannan kuɗin ya juya ya zama asarar mai aiki kai tsaye, har zuwa 30% - "bonus" na masu zamba. Ko da yake asarar zamba na masu amfani sun fi girma da yawa. Kuna iya jin haushin kusan masu aiki da masu samar da abun ciki, amma wannan kasuwancin mara ma'ana ne, samun kudin shiga ya zarce asarar da aka yi. Don haka, ba dole ba ne mu dogara ga "kawu mai kyau", za mu iya kula da kanmu kawai. Kuma don wannan kana buƙatar ba kawai don kunna hankali lokaci-lokaci ba, har ma don yin tunanin a wane lokaci ya kamata a yi hakan.

Wani takarda mai tsawo da ban sha'awa mai suna "Kaspersky Security Bulletin 2008. Ci gaban barazanar a farkon rabin 2008" Kaspersky Lab ya shirya kuma an buga shi a farkon Satumba, binciken ya fi dacewa ga masu sana'a. An ba da shawarar sosai don karantawa, amma mun fi sha'awar babin sa na “wayar hannu”, wanda na ambata a ƙasa ba tare da wani canji da taƙaitaccen bayani ba. Wannan ba talla ba ce ga masu haɓaka hanyoyin magance ƙwayoyin cuta, muna kallon abubuwa daga rukunin "ya kamata kowa ya san wannan". Karanta, jin ƙididdiga kuma gwada tsarin da aka kwatanta don rarraba wannan shara. Domin, kamar yadda ya sake bayyana, lokacin da muka shiga cikin mafi yawan matsaloli, mu kanmu muna taimakon kanmu da namu “kananan hannaye masu wasa.”

Sergey Golovanov, Alexander Gostev, Denis Maslennikov

Barazana "Wayar hannu": farkon kasuwanci

Rabin farko na 2008 ya zama mai ban sha'awa ta fuskar barazanar wayar hannu, ko kuma, ɗaya daga cikin nau'ikan su: Trojans waɗanda ke aika SMS da aka biya a ɓoye zuwa ga gajerun lambobi.

A cikin wannan mahallin yana da kyau a lura:

  1. Ci gaba a cikin adadin halayen malware Trojan-SMS.
  2. Cross-platform mobile Trojans: Duk wayoyi masu goyan bayan aikace-aikacen Java ko suna da fassarar yaren Python suna cikin haɗari.
  3. Ƙara yawan rukunin yanar gizon WAP da ke ɗaukar irin waɗannan Trojans.
  4. Bayyanowar saƙon wasikun banza a cikin shafukan talla na ICQ WAP da shirye-shiryen ƙeta da aka shirya akan su.
  5. Daban-daban dabarun injiniyan zamantakewa da ake amfani da su wajen rarrabawa da ɓarna malware.
  6. Ƙayyadadden adadin gajerun lambobi da masu zamba ke amfani da su.

Waɗannan da sauran abubuwan za a tattauna su dalla-dalla a ƙasa.

Bari mu fara da haɓakar Trojan-SMS malware. A cikin rabin farko na 2008, an gano ƙarin irin waɗannan shirye-shiryen fiye da tsawon lokacin wanzuwar su. Ka tuna cewa mun gano malware na farko tare da wannan hali a ranar 27 ga Fabrairu, 2006 (Trojan-SMS.J2ME.RedBrowser.a).

Hoton yana nuna adadin sabbin Trojan-SMS da manazarta Kaspersky Lab suka gano (a watannin 2008 Mazda a>)

Gabaɗaya, 422% ƙarin sabbin Trojan-SMS an gano su a cikin watanni shida na 2008 fiye da rabin na biyu na 2007. A halin yanzu akwai iyalai 9 don dandalin J2ME, 3 na Symbian, da 1 na Python. Menene waɗannan Trojans? Da kansu, waɗannan munanan shirye-shiryen sana'a ne na farko.

Idan muka yi magana game da J2ME Trojans, mafi yawansu suna da tsari mai zuwa: rumbun adana kayan tarihi mai ɗauke da fayilolin aji da yawa. Ɗaya daga cikin waɗannan fayilolin yana aika saƙon SMS da aka biya zuwa gajeriyar lamba (ba shakka, ba tare da neman izinin mai wayar ya aika ba kuma ba tare da sanar da shi kuɗin irin wannan sakon ba). Sauran fayilolin aji don rufe fuska ne kawai. A cikin ma’adanar ana iya samun hotuna da yawa (mafi yawancin abubuwan batsa), da kuma fayil ɗin bayyananne, wanda a wasu lokuta ma malware ke amfani da shi wajen aika saƙonni.

Shirye-shiryen dangin Trojan-SMS.Python.Flocker da aka rubuta don wani dandamali (Python) a zahiri ba su da bambanci da J2ME Trojans: farkon shirin da kansa da aikinsa ya kasance iri ɗaya. Taskar sis ta ƙunshi babban rubutun da aka rubuta da Python, wanda ke aika SMS zuwa gajeriyar lambar ƙima, da kuma ƙarin rubutun da ke taimakawa wajen rufe babban aikin shirin ɓarna.

Trojan-SMS suna da haɗari saboda shirye-shirye ne na dandamali. Idan waya (wato, waya, ba lallai ba ne smartphone) tana da na'urar Java a ciki, to Trojan-SMS.J2ME zata iya aiki akan irin wannan na'urar ba tare da wata matsala ba. Amma ga Trojan-SMS.Python, a nan muna magana ne game da giciye-dandamali a cikin sashin wayoyin hannu bisa OS Symbian. Idan wayar (tare da kowace sigar OS) tana da fassarar Python, to Trojan-SMS.Python zai iya aiki akan kowane ɗayan waɗannan samfuran.

Hanyoyin da suka fi shahara (daga cikin ’yan tsiraru) na yada irin wadannan munanan shirye-shirye, ita ce ta hanyoyin WAP daban-daban, inda ake ba wa maziyarta damar sauke wakoki da hotuna da wasanni da aikace-aikacen wayar salula iri-iri. Mafi akasarin Trojans suna ɓad da kansu ko dai a matsayin aikace-aikacen da za su iya aika SMS kyauta ko kuma ba da damar yin amfani da Intanet ta wayar hannu kyauta, ko kuma a matsayin aikace-aikacen yanayin batsa ko na batsa.

Wani lokaci marubutan ƙwayoyin cuta kan zo da hanyoyi na asali don rufe munanan ayyukan shirin. Misali, bayan mai amfani ya ƙaddamar da Trojan-SMS.J2ME.Swapi.g, gaisuwa tana bayyana akan allon wayar tare da ba da shawara don duba hoton abubuwan batsa. Don yin wannan, kuna buƙatar samun lokaci don danna maɓallin "YES" yayin da gajeriyar siginar kiɗa ke sauti. (Tsarin-archive na shirin ya ƙunshi duka png-fayil tare da hoto da waƙar midi.) Ƙoƙarin samun lokaci don danna maɓallin cikin lokaci, mai amfani bai gane cewa kowane latsawa ba (ko akan lokaci ko a'a) yana kaiwa ga aika saƙon SMS zuwa gajeriyar lamba da kuma rubuta wani adadi daga asusunsa.

A zahiri duk rukunin yanar gizon da ke ɗaukar malware suna ba masu amfani damar loda fayilolinsu. Sauƙin yin rajista (a zahiri dannawa biyu) da samun damar yin amfani da irin waɗannan ayyukan kyauta suna ba wa marubutan ƙwayoyin cuta damar rarraba ayyukansu na farko ba tare da wata matsala ba. Maharin zai iya ba da sunan fayil kawai wanda yake da kyau sosai ga wadanda abin ya shafa (free_gprs_internet, otpravka_sms_besplatno, golaya_devushka, da sauransu), rubuta wannan sharhi mai ban sha'awa kuma jira ɗaya daga cikin masu amfani don yanke shawarar "aika SMS kyauta" ko kuma “kalli hotunan batsa” .

Bayan sanya software mara kyau, maharin yana buƙatar ƙirƙirar talla mai kyau don ta. Anan aika wasikun jama'a a cikin ICQ ko wasikun banza akan taruka daban-daban suna zuwa don ceto. Me yasa ICQ? Ka tuna cewa wannan sabis ɗin saƙon nan take ya shahara a Rasha da ƙasashen CIS. Yawancin masu amfani waɗanda ke son samun dama ta dindindin don sadarwa suna amfani da abokan cinikin wayar hannu ta ICQ. Ga wanda ya kai harin, irin wadannan mutane ne masu yuwuwa wadanda abin ya shafa.

Don haka, an kafa sarka mai ban sha'awa:

  • Ƙirƙiri malware
  • An buga shi a rukunin yanar gizon WAP tare da take da sharhi mai kayatarwa
  • Yin spamming wanda zai iya shafar masu amfani da abokan cinikin ICQ ta hannu.
Yanzu muna da batu guda ɗaya da za mu bincika, wanda ya shafi gajerun lambobi da Trojans na wayar hannu ke amfani da su. Daga cikin dukkan shirye-shiryen da Kaspersky Lab ya gano, gajerun lambobi uku sun zama mafi mashahuri: 1171, 1161, 3649. Bugu da ƙari, waɗannan lambobin suna amfani da su ba kawai ta hanyar maharan ba, har ma da kamfanoni daban-daban na shari'a da ke ba da sabis daban-daban. Mai biyan kuɗi na SMS ana ƙaddara ta prefix ɗin da aka aiko da saƙon da shi. A cikin Trojan-SMS daban-daban, waɗannan prefixes suna canzawa, amma wani lokacin akan sami maimaitawa.

Shahararren irin wannan nau'in laifuffukan yanar gizo yana faruwa ne saboda kebantaccen sauƙi na biyan kuɗin SMS.

An san cewa masu amfani da wayar hannu suna hayar gajerun lambobi. Yana da tsada sosai ga mai zaman kansa ya yi hayan irin wannan ɗakin. Amma akwai masu samar da abun ciki waɗanda ke rage irin waɗannan gajerun lambobi ta hanyar ƙara musu takamaiman prefix. Don haka, gajeriyar lamba ɗaya, amma tare da prefixes daban-daban, masu haya da yawa za su iya amfani da su.

Misali, gajeriyar lamba 1171 na ɗaya daga cikin waɗannan masu ba da sabis ne, amma idan an aika saƙon da ya fara da "S1" zuwa lamba 1171, tsarin mai ba da sabis zai tura wani ɓangare na kuɗin irin wannan SMS zuwa asusun mai karɓar. "S1". Ma'aikacin wayar hannu yana ɗaukar daga 45% zuwa 49% na farashin SMS da aka aika zuwa gajeriyar lamba, kusan kashi 10% na karɓar hayar wannan lambar. Sauran kuɗaɗen ana aika wa ɗan kasuwa, a wannan yanayin, mai damfarar “mobile”.

Don sake dubawa, rabin farkon 2008 ya ga babban ci gaba na farko a tarihin malware don wayoyin hannu waɗanda ke aika saƙonnin SMS da aka biya zuwa ga gajerun lambobi ba tare da sanin masu waya ba. Babu shakka, duk waɗannan shirye-shiryen an ƙirƙira su ne da manufa ɗaya: don samun kuɗin masu amfani da zamba. Sauƙin ƙirƙira da rarraba irin waɗannan aikace-aikacen na iya haifar da ƙarin haɓakar halayen malware Trojan-SMS a cikin rabin na biyu na 2008. Za mu bi ci gaban halin da ake ciki.

Haɗarin Motsi

Batun ƙwayoyin cuta ta wayar hannu ba abin burgewa bane. Duk da haka, wajibi ne a rubuta game da shi kuma an ba da shawarar sosai don karanta shi. Sai dai idan ba shakka, za ku ciyar da "kawun wani" daga ma'auni na asusun ku.

Shekaru biyu da suka gabata, kusan kowa ba ya ɗaukar ainihin manufar "virus ta hannu" da muhimmanci. Ee, akwai wasu sana'o'i daban-daban waɗanda za a iya ɗaukar su azaman ƙwayoyin cuta, amma yaduwar su ba ta da kyau, kuma duk yana kama da jin daɗin masu shirye-shirye marasa lahani. Akwai ma wani ra'ayi cewa masu haɓaka hanyoyin rigakafin riga-kafi ne suka ƙirƙira barazanar wayar hannu don haɓaka samfuran su. Ƙoƙarin farko na rubuta "malware ta hannu" ya rasa babban direba: sha'awar kuɗi na masu haɓakawa. Yanzu duk wannan sharrin wayar hannu ya koyi daidai don "sami" kuɗi don masu ƙirƙira shi ta duk abubuwan cikin wayar hannu iri ɗaya. Wanne ya daɗe ya zama babban kayan aiki da tsaka-tsakin hanyar haɗin kai don yawancin ayyukan aikata laifuka a cikin "space mobile"

Ba masu amfani kawai ke fama da zamba ta wayar hannu ba. Rashin aikin fasaha na tsarin lissafin kuɗi yana ba da damar masu zamba su "madara" dubban rubles daga kowane katin SIM da aka saya musamman don wannan. Rabin wannan kuɗin ya juya ya zama asarar mai aiki kai tsaye, har zuwa 30% - "bonus" na masu zamba. Ko da yake asarar zamba na masu amfani sun fi girma da yawa. Kuna iya jin haushin kusan masu aiki da masu samar da abun ciki, amma wannan kasuwancin mara ma'ana ne, samun kudin shiga ya zarce asarar da aka yi. Don haka, ba dole ba ne mu dogara ga "kawun kirki", dole ne mu kula da kanmu kawai. Kuma don wannan kana buƙatar ba kawai don kunna hankali lokaci-lokaci ba, har ma don yin tunanin a wane lokaci ya kamata a yi hakan.

Wani takarda mai tsawo da ban sha'awa mai suna "Kaspersky Security Bulletin 2008. Ci gaban barazanar a farkon rabin 2008" Kaspersky Lab ya shirya kuma an buga shi a farkon Satumba, binciken ya fi dacewa ga masu sana'a. An ba da shawarar sosai don karantawa, amma mun fi sha'awar babin sa na “wayar hannu”, wanda na ambata a ƙasa ba tare da wani canji da taƙaitaccen bayani ba. Wannan ba talla ba ce ga masu haɓaka hanyoyin magance ƙwayoyin cuta, muna kallon abubuwa daga rukunin "ya kamata kowa ya san wannan". Karanta, jin ƙididdiga kuma gwada tsarin da aka kwatanta don rarraba wannan shara. Domin, kamar yadda ya sake bayyana, lokacin da muka shiga cikin mafi yawan matsaloli, mu kanmu muna taimakon kanmu da namu “kananan hannaye masu wasa.”

Sergey Golovanov, Alexander Gostev, Denis Maslennikov

Barazana "Wayar hannu": farkon kasuwanci

Rabin farko na 2008 ya zama mai ban sha'awa ta fuskar barazanar wayar hannu, ko kuma, ɗaya daga cikin nau'ikan su: Trojans waɗanda ke aika SMS da aka biya a ɓoye zuwa ga gajerun lambobi.

A cikin wannan mahallin yana da kyau a lura:

  1. Ci gaba a cikin adadin halayen malware Trojan-SMS.
  2. Cross-platform mobile Trojans: Duk wayoyi masu goyan bayan aikace-aikacen Java ko suna da fassarar yaren Python suna cikin haɗari.
  3. Ƙara yawan rukunin yanar gizon WAP da ke ɗaukar irin waɗannan Trojans.
  4. Bayyanowar saƙon wasikun banza a cikin shafukan talla na ICQ WAP da shirye-shiryen ƙeta da aka shirya akan su.
  5. Daban-daban dabarun injiniyan zamantakewa da ake amfani da su wajen rarrabawa da ɓarna malware.
  6. Ƙayyadadden adadin gajerun lambobi da masu zamba ke amfani da su.

Waɗannan da sauran abubuwan za a tattauna su dalla-dalla a ƙasa.

Bari mu fara da haɓaka halayen Trojan-SMS malware. A cikin rabin farko na 2008, an gano ƙarin irin waɗannan shirye-shiryen fiye da tsawon lokacin wanzuwar su. Ka tuna cewa mun gano malware na farko tare da wannan hali a ranar 27 ga Fabrairu, 2006 (Trojan-SMS.J2ME.RedBrowser.a).

Hoton yana nuna adadin sabbin Trojan-SMS da manazarta Kaspersky Lab suka gano (a watannin 2008 Mazda a>)

Gabaɗaya, 422% ƙarin sabbin Trojan-SMS an gano su a cikin watanni shida na 2008 fiye da rabin na biyu na 2007. A halin yanzu akwai iyalai 9 na dandalin J2ME, 3 na Symbian da 1 na Python. Menene waɗannan Trojans? Da kansu, waɗannan munanan shirye-shiryen sana'a ne na farko.

Idan muka yi magana game da J2ME Trojans, mafi yawansu suna da tsari mai zuwa: rumbun adana kayan tarihi mai ɗauke da fayilolin aji da yawa. Ɗaya daga cikin waɗannan fayilolin yana aika saƙon SMS da aka biya zuwa gajeriyar lamba (ba shakka, ba tare da neman izinin mai wayar ya aika ba kuma ba tare da sanar da shi kuɗin irin wannan sakon ba). Sauran fayilolin aji don rufe fuska ne kawai. A cikin ma’adanar ana iya samun hotuna da yawa (mafi yawancin abubuwan batsa), da kuma fayil ɗin bayyananne, wanda a wasu lokuta ma malware ke amfani da shi wajen aika saƙonni.

Shirye-shiryen dangin Trojan-SMS.Python.Flocker da aka rubuta don wani dandamali (Python) a zahiri ba su da bambanci da J2ME Trojans: farkon shirin da kansa da aikinsa ya kasance iri ɗaya. Taskar sis ta ƙunshi babban rubutun da aka rubuta da Python, wanda ke aika SMS zuwa gajeriyar lambar ƙima, da kuma ƙarin rubutun da ke taimakawa wajen rufe babban aikin shirin ɓarna.

Trojan-SMS suna da haɗari saboda shirye-shirye ne na dandamali. Idan waya (wato, waya, ba lallai ba ne smartphone) tana da na'urar Java a ciki, to Trojan-SMS.J2ME zata iya aiki akan irin wannan na'urar ba tare da wata matsala ba. Amma ga Trojan-SMS.Python, a nan muna magana ne game da giciye-dandamali a cikin sashin wayoyin hannu bisa OS Symbian. Idan wayar (tare da kowace sigar OS) tana da fassarar Python, to Trojan-SMS.Python zai iya aiki akan kowane ɗayan waɗannan samfuran.

Hanyoyin da suka fi shahara (daga cikin ’yan tsiraru) na yada irin wadannan munanan shirye-shirye, ita ce ta hanyoyin WAP daban-daban, inda ake ba wa maziyarta damar sauke wakoki da hotuna da wasanni da aikace-aikacen wayar salula iri-iri. Mafi akasarin Trojans suna ɓad da kansu ko dai a matsayin aikace-aikacen da za su iya aika SMS kyauta ko kuma ba da damar yin amfani da Intanet ta wayar hannu kyauta, ko kuma a matsayin aikace-aikacen yanayin batsa ko na batsa.

Wani lokaci marubutan ƙwayoyin cuta kan zo da hanyoyi na asali don rufe munanan ayyukan shirin. Misali, bayan mai amfani ya ƙaddamar da Trojan-SMS.J2ME.Swapi.g, gaisuwa tana bayyana akan allon wayar tare da ba da shawara don duba hoton abubuwan batsa. Don yin wannan, kuna buƙatar samun lokaci don danna maɓallin "YES" yayin da gajeriyar siginar kiɗa ke sauti. (Tsarin-archive na shirin ya ƙunshi duka png-fayil tare da hoto da waƙar midi.) Ƙoƙarin samun lokaci don danna maɓallin cikin lokaci, mai amfani bai gane cewa kowane latsawa ba (ko akan lokaci ko a'a) yana kaiwa ga aika saƙon SMS zuwa gajeriyar lamba da kuma rubuta wani adadi daga asusunsa.

A zahiri duk rukunin yanar gizon da ke ɗaukar malware suna ba masu amfani damar loda fayilolinsu. Sauƙin yin rajista (a zahiri dannawa biyu) da samun damar yin amfani da irin waɗannan ayyukan kyauta suna ba wa marubutan ƙwayoyin cuta damar rarraba ayyukansu na farko ba tare da wata matsala ba. Maharin zai iya ba da sunan fayil kawai wanda yake da kyau sosai ga wadanda abin ya shafa (free_gprs_internet, otpravka_sms_besplatno, golaya_devushka, da sauransu), rubuta wannan sharhi mai ban sha'awa kuma jira ɗaya daga cikin masu amfani don yanke shawarar "aika SMS kyauta" ko kuma “kalli hotunan batsa” .

Bayan sanya software mara kyau, maharin yana buƙatar ƙirƙirar talla mai kyau don ta. Anan aika wasikun jama'a a cikin ICQ ko wasikun banza akan taruka daban-daban suna zuwa don ceto. Me yasa ICQ? Ka tuna cewa wannan sabis ɗin saƙon nan take ya shahara a Rasha da ƙasashen CIS. Yawancin masu amfani waɗanda ke son samun dama ta dindindin don sadarwa suna amfani da abokan cinikin wayar hannu ta ICQ. Ga wanda ya kai harin, irin wadannan mutane ne masu yuwuwa wadanda abin ya shafa.

Don haka, an kafa sarka mai ban sha'awa:

  • Ƙirƙiri malware
  • An buga shi a rukunin yanar gizon WAP tare da take da sharhi mai kayatarwa
  • Yin spamming wanda zai iya shafar masu amfani da abokan cinikin ICQ ta hannu.
Yanzu muna da batu guda ɗaya da za mu bincika, wanda ya shafi gajerun lambobi da Trojans na wayar hannu ke amfani da su. Daga cikin dukkan shirye-shiryen da Kaspersky Lab ya gano, gajerun lambobi uku sun zama mafi mashahuri: 1171, 1161, 3649. Bugu da ƙari, waɗannan lambobin suna amfani da su ba kawai ta hanyar maharan ba, har ma da kamfanoni daban-daban na shari'a da ke ba da sabis daban-daban. Mai biyan kuɗi na SMS ana ƙaddara ta prefix ɗin da aka aiko da saƙon da shi. A cikin Trojan-SMS daban-daban, waɗannan prefixes suna canzawa, amma wani lokacin akan sami maimaitawa.

Shahararren irin wannan nau'in laifuffukan yanar gizo yana faruwa ne saboda kebantaccen sauƙi na biyan kuɗin SMS.

An san cewa masu amfani da wayar hannu suna hayar gajerun lambobi. Yana da tsada sosai ga mai zaman kansa ya yi hayan irin wannan ɗakin. Amma akwai masu samar da abun ciki waɗanda ke rage irin waɗannan gajerun lambobi ta hanyar ƙara musu takamaiman prefix. Don haka, gajeriyar lamba ɗaya, amma tare da prefixes daban-daban, masu haya da yawa za su iya amfani da su.

Misali, gajeriyar lamba 1171 na ɗaya daga cikin waɗannan masu ba da sabis ne, amma idan an aika saƙon da ya fara da "S1" zuwa lamba 1171, tsarin mai ba da sabis zai tura wani ɓangare na kuɗin irin wannan SMS zuwa asusun mai karɓar. "S1". Ma'aikacin wayar hannu yana ɗaukar daga 45% zuwa 49% na farashin SMS da aka aika zuwa gajeriyar lamba, kusan kashi 10% na karɓar hayar wannan lambar. Sauran kuɗaɗen ana aika wa ɗan kasuwa, a wannan yanayin, mai damfarar “mobile”.

Don sake dubawa, rabin farkon 2008 ya ga babban ci gaba na farko a tarihin malware don wayoyin hannu waɗanda ke aika saƙonnin SMS da aka biya zuwa ga gajerun lambobi ba tare da sanin masu waya ba. Babu shakka, duk waɗannan shirye-shiryen an ƙirƙira su ne da manufa ɗaya: don samun kuɗin masu amfani da zamba. Sauƙin ƙirƙira da rarraba irin waɗannan aikace-aikacen na iya haifar da ƙarin haɓakar malware na Trojan-SMS a cikin rabin na biyu na 2008. Za mu bi ci gaban halin da ake ciki.

Haɗarin Motsi

Batun ƙwayoyin cuta ta wayar hannu ba abin burgewa bane. Duk da haka, wajibi ne a rubuta game da shi kuma an ba da shawarar sosai don karanta shi. Sai dai idan ba shakka, za ku ciyar da "kawun wani" daga ma'auni na asusun ku.

Shekaru biyu da suka gabata, kusan kowa ba ya ɗaukar ainihin manufar "virus ta hannu" da muhimmanci. Ee, akwai wasu sana'o'i daban-daban waɗanda za a iya ɗaukar su azaman ƙwayoyin cuta, amma yaduwar su ba ta da kyau, kuma duk yana kama da jin daɗin masu shirye-shirye marasa lahani. Akwai ma wani ra'ayi cewa masu haɓaka hanyoyin rigakafin riga-kafi ne suka ƙirƙira barazanar wayar hannu don haɓaka samfuran su. Ƙoƙarin farko na rubuta "malware ta hannu" ya rasa babban direba: sha'awar kuɗi na masu haɓakawa. Yanzu duk wannan sharrin wayar hannu ya koyi daidai don "sami" kuɗi don masu ƙirƙira shi ta duk abubuwan cikin wayar hannu iri ɗaya. Wanne ya daɗe ya zama babban kayan aiki da tsaka-tsakin hanyar haɗin kai don yawancin ayyukan aikata laifuka a cikin "space mobile"

Ba masu amfani kawai ke fama da zamba ta wayar hannu ba. Rashin aikin fasaha na tsarin lissafin kuɗi yana ba da damar masu zamba su "madara" dubban rubles daga kowane katin SIM da aka saya musamman don wannan. Rabin wannan kuɗin ya juya ya zama asarar mai aiki kai tsaye, har zuwa 30% - "bonus" na masu zamba. Ko da yake asarar zamba na masu amfani sun fi girma da yawa. Kuna iya jin haushin kusan masu aiki da masu samar da abun ciki, amma wannan kasuwancin mara ma'ana ne, samun kudin shiga ya zarce asarar da aka yi. Don haka, ba dole ba ne mu dogara ga "kawu mai kyau", za mu iya kula da kanmu kawai. Kuma don wannan kana buƙatar ba kawai don kunna hankali lokaci-lokaci ba, har ma don yin tunanin a wane lokaci ya kamata a yi hakan.

Wani takarda mai tsawo da ban sha'awa mai suna "Kaspersky Security Bulletin 2008. Ci gaban barazanar a farkon rabin 2008" Kaspersky Lab ya shirya kuma an buga shi a farkon Satumba, binciken ya fi dacewa ga masu sana'a. An ba da shawarar sosai don karantawa, amma mun fi sha'awar babin sa na “wayar hannu”, wanda na ambata a ƙasa ba tare da wani canji da taƙaitaccen bayani ba. Wannan ba talla ba ce ga masu haɓaka hanyoyin magance ƙwayoyin cuta, muna kallon abubuwa daga rukunin "ya kamata kowa ya san wannan". Karanta, jin ƙididdiga kuma gwada tsarin da aka kwatanta don rarraba wannan shara. Domin, kamar yadda ya sake bayyana, lokacin da muka shiga cikin mafi yawan matsaloli, mu kanmu muna taimakon kanmu da namu “kananan hannaye masu wasa.”

Sergey Golovanov, Alexander Gostev, Denis Maslennikov

Barazana "Wayar hannu": farkon kasuwanci

Rabin farko na 2008 ya zama mai ban sha'awa ta fuskar barazanar wayar hannu, ko kuma, ɗaya daga cikin nau'ikan su: Trojans waɗanda ke aika SMS da aka biya a ɓoye zuwa ga gajerun lambobi.

A cikin wannan mahallin yana da kyau a lura:

  1. Ci gaba a cikin adadin halayen malware Trojan-SMS.
  2. Cross-platform mobile Trojans: Duk wayoyi masu goyan bayan aikace-aikacen Java ko suna da fassarar yaren Python suna cikin haɗari.
  3. Ƙara yawan rukunin yanar gizon WAP da ke ɗaukar irin waɗannan Trojans.
  4. Bayyanowar saƙon wasikun banza a cikin shafukan talla na ICQ WAP da shirye-shiryen ƙeta da aka shirya akan su.
  5. Daban-daban dabarun injiniyan zamantakewa da ake amfani da su wajen rarrabawa da ɓarna malware.
  6. Ƙayyadadden adadin gajerun lambobi da masu zamba ke amfani da su.

Waɗannan da sauran abubuwan za a tattauna su dalla-dalla a ƙasa.

Bari mu fara da haɓakar Trojan-SMS malware. A cikin rabin farko na 2008, an gano ƙarin irin waɗannan shirye-shiryen fiye da tsawon lokacin wanzuwar su. Ka tuna cewa mun gano malware na farko tare da wannan hali a ranar 27 ga Fabrairu, 2006 (Trojan-SMS.J2ME.RedBrowser.a).

Hoton yana nuna adadin sabbin Trojan-SMS da manazarta Kaspersky Lab suka gano (a watannin 2008 Mazda a>)

Gabaɗaya, 422% ƙarin sabbin Trojan-SMS an gano su a cikin watanni shida na 2008 fiye da rabin na biyu na 2007. A halin yanzu akwai iyalai 9 don dandalin J2ME, 3 na Symbian, da 1 na Python. Menene waɗannan Trojans? Da kansu, waɗannan munanan shirye-shiryen sana'a ne na farko.

Idan muka yi magana game da J2ME Trojans, mafi yawansu suna da tsari mai zuwa: rumbun adana kayan tarihi mai ɗauke da fayilolin aji da yawa. Ɗaya daga cikin waɗannan fayilolin yana aika saƙon SMS da aka biya zuwa gajeriyar lamba (ba shakka, ba tare da neman izinin mai wayar ya aika ba kuma ba tare da sanar da shi kuɗin irin wannan sakon ba). Sauran fayilolin aji don rufe fuska ne kawai. A cikin ma’adanar ana iya samun hotuna da yawa (mafi yawancin abubuwan batsa), da kuma fayil ɗin bayyananne, wanda a wasu lokuta ma malware ke amfani da shi wajen aika saƙonni.

Shirye-shiryen dangin Trojan-SMS.Python.Flocker da aka rubuta don wani dandamali (Python) a zahiri ba su da bambanci da J2ME Trojans: farkon shirin da kansa da aikinsa ya kasance iri ɗaya. Taskar sis ta ƙunshi babban rubutun da aka rubuta da Python, wanda ke aika SMS zuwa gajeriyar lambar ƙima, da kuma ƙarin rubutun da ke taimakawa wajen rufe babban aikin shirin ɓarna.

Trojan-SMS suna da haɗari saboda shirye-shirye ne na dandamali. Idan waya (wato, waya, ba lallai ba ne smartphone) tana da na'urar Java a ciki, to Trojan-SMS.J2ME zata iya aiki akan irin wannan na'urar ba tare da wata matsala ba. Amma ga Trojan-SMS.Python, a nan muna magana ne game da giciye-dandamali a cikin sashin wayoyin hannu bisa OS Symbian. Idan wayar (tare da kowace sigar OS) tana da fassarar Python, to Trojan-SMS.Python zai iya aiki akan kowane ɗayan waɗannan samfuran.

Hanyoyin da suka fi shahara (daga cikin ’yan tsiraru) na yada irin wadannan munanan shirye-shirye, ita ce ta hanyoyin WAP daban-daban, inda ake ba wa maziyarta damar sauke wakoki da hotuna da wasanni da aikace-aikacen wayar salula iri-iri. Mafi akasarin Trojans suna ɓad da kansu ko dai a matsayin aikace-aikacen da za su iya aika SMS kyauta ko kuma ba da damar yin amfani da Intanet ta wayar hannu kyauta, ko kuma a matsayin aikace-aikacen yanayin batsa ko na batsa.

Wani lokaci marubutan ƙwayoyin cuta kan zo da hanyoyi na asali don rufe munanan ayyukan shirin. Misali, bayan mai amfani ya ƙaddamar da Trojan-SMS.J2ME.Swapi.g, gaisuwa tana bayyana akan allon wayar tare da ba da shawara don duba hoton abubuwan batsa. Don yin wannan, kuna buƙatar samun lokaci don danna maɓallin "YES" yayin da gajeriyar siginar kiɗa ke sauti. (Tsarin-archive na shirin ya ƙunshi duka png-fayil tare da hoto da waƙar midi.) Ƙoƙarin samun lokaci don danna maɓallin cikin lokaci, mai amfani bai gane cewa kowane latsawa ba (ko akan lokaci ko a'a) yana kaiwa ga aika saƙon SMS zuwa gajeriyar lamba da kuma rubuta wani adadi daga asusunsa.

A zahiri duk rukunin yanar gizon da ke ɗaukar malware suna ba masu amfani damar loda fayilolinsu. Sauƙin yin rajista (a zahiri dannawa biyu) da samun damar yin amfani da irin waɗannan ayyukan kyauta suna ba wa marubutan ƙwayoyin cuta damar rarraba ayyukansu na farko ba tare da wata matsala ba. Maharin zai iya ba da sunan fayil kawai wanda yake da kyau sosai ga wadanda abin ya shafa (free_gprs_internet, otpravka_sms_besplatno, golaya_devushka, da sauransu), rubuta wannan sharhi mai ban sha'awa kuma jira ɗaya daga cikin masu amfani don yanke shawarar "aika SMS kyauta" ko kuma “kalli hotunan batsa” .

Bayan sanya software mara kyau, maharin yana buƙatar ƙirƙirar talla mai kyau don ta. Anan aika wasikun jama'a a cikin ICQ ko wasikun banza akan taruka daban-daban suna zuwa don ceto. Me yasa ICQ? Ka tuna cewa wannan sabis ɗin saƙon nan take ya shahara a Rasha da ƙasashen CIS. Yawancin masu amfani waɗanda ke son samun dama ta dindindin don sadarwa suna amfani da abokan cinikin wayar hannu ta ICQ. Ga wanda ya kai harin, irin wadannan mutane ne masu yuwuwa wadanda abin ya shafa.

Don haka, an kafa sarka mai ban sha'awa:

  • Ƙirƙiri malware
  • An buga shi a rukunin yanar gizon WAP tare da take da sharhi mai kayatarwa
  • Yin spamming wanda zai iya shafar masu amfani da abokan cinikin ICQ ta hannu.
Yanzu muna da batu guda ɗaya da za mu bincika, wanda ya shafi gajerun lambobi da Trojans na wayar hannu ke amfani da su. Daga cikin dukkan shirye-shiryen da Kaspersky Lab ya gano, gajerun lambobi uku sun zama mafi mashahuri: 1171, 1161, 3649. Bugu da ƙari, waɗannan lambobin suna amfani da su ba kawai ta hanyar maharan ba, har ma da kamfanoni daban-daban na shari'a da ke ba da sabis daban-daban. Mai biyan kuɗi na SMS ana ƙaddara ta prefix ɗin da aka aiko da saƙon da shi. A cikin Trojan-SMS daban-daban, waɗannan prefixes suna canzawa, amma wani lokacin akan sami maimaitawa.

Shahararren irin wannan nau'in laifuffukan yanar gizo yana faruwa ne saboda kebantaccen sauƙi na biyan kuɗin SMS.

An san cewa masu amfani da wayar hannu suna hayar gajerun lambobi. Yana da tsada sosai ga mai zaman kansa ya yi hayan irin wannan ɗakin. Amma akwai masu samar da abun ciki waɗanda ke rage irin waɗannan gajerun lambobi ta hanyar ƙara musu takamaiman prefix. Don haka, gajeriyar lamba ɗaya, amma tare da prefixes daban-daban, masu haya da yawa za su iya amfani da su.

Misali, gajeriyar lamba 1171 na ɗaya daga cikin waɗannan masu ba da sabis ne, amma idan an aika saƙon da ya fara da "S1" zuwa lamba 1171, tsarin mai ba da sabis zai tura wani ɓangare na kuɗin irin wannan SMS zuwa asusun mai karɓar. "S1". Ma'aikacin wayar hannu yana ɗaukar daga 45% zuwa 49% na farashin SMS da aka aika zuwa gajeriyar lamba, kusan kashi 10% na karɓar hayar wannan lambar. Sauran kuɗaɗen ana aika wa ɗan kasuwa, a wannan yanayin, mai damfarar “mobile”.

Don sake dubawa, rabin farkon 2008 ya ga babban ci gaba na farko a tarihin malware don wayoyin hannu waɗanda ke aika saƙonnin SMS da aka biya zuwa ga gajerun lambobi ba tare da sanin masu waya ba. Babu shakka, duk waɗannan shirye-shiryen an ƙirƙira su ne da manufa ɗaya: don samun kuɗin masu amfani da zamba. Sauƙin ƙirƙira da rarraba irin waɗannan aikace-aikacen na iya haifar da ƙarin haɓakar halayen malware Trojan-SMS a cikin rabin na biyu na 2008. Za mu bi ci gaban halin da ake ciki.

Haɗarin Motsi

Batun ƙwayoyin cuta ta wayar hannu ba abin burgewa bane. Duk da haka, wajibi ne a rubuta game da shi kuma an ba da shawarar sosai don karanta shi. Sai dai idan ba shakka, za ku ciyar da "kawun wani" daga ma'auni na asusun ku.

Shekaru biyu da suka gabata, kusan kowa ba ya ɗaukar ainihin manufar "virus ta hannu" da muhimmanci. Ee, akwai wasu sana'o'i daban-daban waɗanda za a iya ɗaukar su azaman ƙwayoyin cuta, amma yaduwar su ba ta da kyau, kuma duk yana kama da jin daɗin masu shirye-shirye marasa lahani. Akwai ma wani ra'ayi cewa masu haɓaka hanyoyin rigakafin riga-kafi ne suka ƙirƙira barazanar wayar hannu don haɓaka samfuran su. Ƙoƙarin farko na rubuta "malware ta hannu" ya rasa babban direba: sha'awar kuɗi na masu haɓakawa. Yanzu duk wannan sharrin wayar hannu ya koyi daidai don "sami" kuɗi don masu ƙirƙira shi ta duk abubuwan cikin wayar hannu iri ɗaya. Wanne ya daɗe ya zama babban kayan aiki da tsaka-tsakin hanyar haɗin kai don yawancin ayyukan aikata laifuka a cikin "space mobile"

Ba masu amfani kawai ke fama da zamba ta wayar hannu ba. Rashin aikin fasaha na tsarin lissafin kuɗi yana ba da damar masu zamba su "madara" dubban rubles daga kowane katin SIM da aka saya musamman don wannan. Rabin wannan kuɗin ya juya ya zama asarar mai aiki kai tsaye, har zuwa 30% - "bonus" na masu zamba. Ko da yake asarar zamba na masu amfani sun fi girma da yawa. Kuna iya jin haushin kusan masu aiki da masu samar da abun ciki, amma wannan kasuwancin mara ma'ana ne, samun kudin shiga ya zarce asarar da aka yi. Don haka, ba dole ba ne mu dogara ga "kawu mai kyau", za mu iya kula da kanmu kawai. Kuma don wannan kana buƙatar ba kawai don kunna hankali lokaci-lokaci ba, har ma don yin tunanin a wane lokaci ya kamata a yi hakan.

Wani takarda mai tsawo da ban sha'awa mai suna "Kaspersky Security Bulletin 2008. Ci gaban barazanar a farkon rabin 2008" Kaspersky Lab ya shirya kuma an buga shi a farkon Satumba, binciken ya fi dacewa ga masu sana'a. An ba da shawarar sosai don karantawa, amma mun fi sha'awar babin sa na “wayar hannu”, wanda na ambata a ƙasa ba tare da wani canji da taƙaitaccen bayani ba. Wannan ba talla ba ce ga masu haɓaka hanyoyin magance ƙwayoyin cuta, muna kallon abubuwa daga rukunin "ya kamata kowa ya san wannan". Karanta, jin ƙididdiga kuma gwada tsarin da aka kwatanta don rarraba wannan shara. Domin, kamar yadda ya sake bayyana, lokacin da muka shiga cikin mafi yawan matsaloli, mu kanmu muna taimakon kanmu da namu “kananan hannaye masu wasa.”

Sergey Golovanov, Alexander Gostev, Denis Maslennikov

Barazana "Wayar hannu": farkon kasuwanci

Rabin farko na 2008 ya zama mai ban sha'awa ta fuskar barazanar wayar hannu, ko kuma, ɗaya daga cikin nau'ikan su: Trojans waɗanda ke aika SMS da aka biya a ɓoye zuwa ga gajerun lambobi.

A cikin wannan mahallin yana da kyau a lura:

  1. Ci gaba a cikin adadin halayen malware Trojan-SMS.
  2. Cross-platform mobile Trojans: Duk wayoyi masu goyan bayan aikace-aikacen Java ko suna da fassarar yaren Python suna cikin haɗari.
  3. Ƙara yawan rukunin yanar gizon WAP da ke ɗaukar irin waɗannan Trojans.
  4. Bayyanowar saƙon wasikun banza a cikin shafukan talla na ICQ WAP da shirye-shiryen ƙeta da aka shirya akan su.
  5. Daban-daban dabarun injiniyan zamantakewa da ake amfani da su wajen rarrabawa da ɓarna malware.
  6. Ƙayyadadden adadin gajerun lambobi da masu zamba ke amfani da su.

Waɗannan da sauran abubuwan za a tattauna su dalla-dalla a ƙasa.

Bari mu fara da haɓaka halayen Trojan-SMS malware. A cikin rabin farko na 2008, an gano ƙarin irin waɗannan shirye-shiryen fiye da tsawon lokacin wanzuwar su. Ka tuna cewa mun gano malware na farko tare da wannan hali a ranar 27 ga Fabrairu, 2006 (Trojan-SMS.J2ME.RedBrowser.a).

Hoton yana nuna adadin sabbin Trojan-SMS da masu bincike na Kaspersky Lab suka gano (a watannin 2008 Mazda.)

Jadawalin yana nuna adadin sabbin Trojan-SMS da manazarta Kaspersky Lab suka gano (a watannin 2008).
Mazda Mazda .) Gabaɗaya, 422% ƙarin sabbin Trojan-SMS an gano su a cikin watanni shida na 2008 fiye da rabin na biyu na 2007. A halin yanzu akwai iyalai 9 na dandalin J2ME, 3 na Symbian da 1 na Python. Menene waɗannan Trojans? Da kansu, waɗannan munanan shirye-shiryen sana'a ne na farko.

Idan muka yi magana game da J2ME Trojans, mafi yawansu suna da tsari mai zuwa: rumbun adana kayan tarihi mai ɗauke da fayilolin aji da yawa. Ɗaya daga cikin waɗannan fayilolin yana aika saƙon SMS da aka biya zuwa gajeriyar lamba (ba shakka, ba tare da neman izinin mai wayar ya aika ba kuma ba tare da sanar da shi kuɗin irin wannan sakon ba). Sauran fayilolin aji don rufe fuska ne kawai. A cikin ma’adanar ana iya samun hotuna da yawa (mafi yawancin abubuwan batsa), da kuma fayil ɗin bayyananne, wanda a wasu lokuta ma malware ke amfani da shi wajen aika saƙonni.

Shirye-shiryen dangin Trojan-SMS.Python.Flocker da aka rubuta don wani dandamali (Python) a zahiri ba su da bambanci da J2ME Trojans: farkon shirin da kansa da aikinsa ya kasance iri ɗaya. Taskar sis ta ƙunshi babban rubutun da aka rubuta da Python, wanda ke aika SMS zuwa gajeriyar lambar ƙima, da kuma ƙarin rubutun da ke taimakawa wajen rufe babban aikin shirin ɓarna.

Trojan-SMS suna da haɗari saboda shirye-shirye ne na dandamali. Idan waya (wato, waya, ba lallai ba ne smartphone) tana da na'urar Java a ciki, to Trojan-SMS.J2ME zata iya aiki akan irin wannan na'urar ba tare da wata matsala ba. Amma ga Trojan-SMS.Python, a nan muna magana ne game da giciye-dandamali a cikin sashin wayoyin hannu bisa OS Symbian. Idan wayar (tare da kowace sigar OS) tana da fassarar Python, to Trojan-SMS.Python zai iya aiki akan kowane ɗayan waɗannan samfuran.

Hanyoyin da suka fi shahara (daga cikin ’yan tsiraru) na yada irin wadannan munanan shirye-shirye, ita ce ta hanyoyin WAP daban-daban, inda ake ba wa maziyarta damar sauke wakoki da hotuna da wasanni da aikace-aikacen wayar salula iri-iri. Mafi akasarin Trojans suna ɓad da kansu ko dai a matsayin aikace-aikacen da za su iya aika SMS kyauta ko kuma ba da damar yin amfani da Intanet ta wayar hannu kyauta, ko kuma a matsayin aikace-aikacen yanayin batsa ko na batsa.

Wani lokaci marubutan ƙwayoyin cuta kan zo da hanyoyi na asali don rufe munanan ayyukan shirin. Misali, bayan mai amfani ya ƙaddamar da Trojan-SMS.J2ME.Swapi.g, gaisuwa tana bayyana akan allon wayar tare da ba da shawara don duba hoton abubuwan batsa. Don yin wannan, kuna buƙatar samun lokaci don danna maɓallin "YES" yayin da gajeriyar siginar kiɗa ke sauti. (Tsarin-archive na shirin ya ƙunshi duka png-fayil tare da hoto da waƙar midi.) Ƙoƙarin samun lokaci don danna maɓallin cikin lokaci, mai amfani bai gane cewa kowane latsawa ba (ko akan lokaci ko a'a) yana kaiwa ga aika saƙon SMS zuwa gajeriyar lamba da kuma rubuta wani adadi daga asusunsa.

A zahiri duk rukunin yanar gizon da ke ɗaukar malware suna ba masu amfani damar loda fayilolinsu. Sauƙin yin rajista (a zahiri dannawa biyu) da samun damar yin amfani da irin waɗannan ayyukan kyauta suna ba wa marubutan ƙwayoyin cuta damar rarraba ayyukansu na farko ba tare da wata matsala ba. Maharin zai iya ba da sunan fayil kawai wanda yake da kyau sosai ga wadanda abin ya shafa (free_gprs_internet, otpravka_sms_besplatno, golaya_devushka, da sauransu), rubuta wannan sharhi mai ban sha'awa kuma jira ɗaya daga cikin masu amfani don yanke shawarar "aika SMS kyauta" ko kuma “kalli hotunan batsa” .

Bayan sanya software mara kyau, maharin yana buƙatar ƙirƙirar talla mai kyau don ta. Anan aika wasikun jama'a a cikin ICQ ko wasikun banza akan taruka daban-daban suna zuwa don ceto. Me yasa ICQ? Ka tuna cewa wannan sabis ɗin saƙon nan take ya shahara a Rasha da ƙasashen CIS. Yawancin masu amfani waɗanda ke son samun dama ta dindindin don sadarwa suna amfani da abokan cinikin wayar hannu ta ICQ. Ga wanda ya kai harin, irin wadannan mutane ne masu yuwuwa wadanda abin ya shafa.

Don haka, an kafa sarka mai ban sha'awa:

  • Ƙirƙiri malware
  • An buga shi a rukunin yanar gizon WAP tare da take da sharhi mai kayatarwa
  • Yin spamming wanda zai iya shafar masu amfani da abokan cinikin ICQ ta hannu.
Yanzu muna da batu guda ɗaya da za mu bincika, wanda ya shafi gajerun lambobi da Trojans na wayar hannu ke amfani da su. Daga cikin dukkan shirye-shiryen da Kaspersky Lab ya gano, gajerun lambobi uku sun zama mafi mashahuri: 1171, 1161, 3649. Bugu da ƙari, waɗannan lambobin suna amfani da su ba kawai ta hanyar maharan ba, har ma da kamfanoni daban-daban na shari'a da ke ba da sabis daban-daban. Mai biyan kuɗi na SMS ana ƙaddara ta prefix ɗin da aka aiko da saƙon da shi. A cikin Trojan-SMS daban-daban, waɗannan prefixes suna canzawa, amma wani lokacin akan sami maimaitawa.

Shahararren irin wannan nau'in laifuffukan yanar gizo yana faruwa ne saboda kebantaccen sauƙi na biyan kuɗin SMS.

An san cewa masu amfani da wayar hannu suna hayar gajerun lambobi. Yana da tsada sosai ga mai zaman kansa ya yi hayan irin wannan ɗakin. Amma akwai masu samar da abun ciki waɗanda ke rage irin waɗannan gajerun lambobi ta hanyar ƙara musu takamaiman prefix. Don haka, gajeriyar lamba ɗaya, amma tare da prefixes daban-daban, masu haya da yawa za su iya amfani da su.

Misali, gajeriyar lamba 1171 na ɗaya daga cikin waɗannan masu ba da sabis ne, amma idan an aika saƙon da ya fara da "S1" zuwa lamba 1171, tsarin mai ba da sabis zai tura wani ɓangare na kuɗin irin wannan SMS zuwa asusun mai karɓar. "S1". Ma'aikacin wayar hannu yana ɗaukar daga 45% zuwa 49% na farashin SMS da aka aika zuwa gajeriyar lamba, kusan kashi 10% na karɓar hayar wannan lambar. Sauran kuɗaɗen ana aika wa ɗan kasuwa, a wannan yanayin, mai damfarar “mobile”.

Don sake dubawa, rabin farkon 2008 ya ga babban ci gaba na farko a tarihin malware don wayoyin hannu waɗanda ke aika saƙonnin SMS da aka biya zuwa ga gajerun lambobi ba tare da sanin masu waya ba. Babu shakka, duk waɗannan shirye-shiryen an ƙirƙira su ne da manufa ɗaya: don samun kuɗin masu amfani da zamba. Sauƙin ƙirƙira da rarraba irin waɗannan aikace-aikacen na iya haifar da ƙarin haɓakar malware na Trojan-SMS a cikin rabin na biyu na 2008. Za mu bi ci gaban halin da ake ciki.