Tlhokomeliso ka malware a Android: li-trojan tsa banka, bohloela ba DNG, le bomenemene ba NFC bo ntse bo eketseha

Lifono tsa Android li lula li le pepeneneng, 'me ho latela lipatlisiso tsa morao-rao, Pono ha ea khutsa hantle.. pakeng Li-Trojan tsa Banka tse nang le li-account tse se nang letho, Spyware e sebelisang bofokoli ba letsatsi le le leng le bomenemene bo sa amaneng le mabitsoSebaka sa tlhaselo se ntse se hola tumellanong le kamohelo ea dijithale Europe le Spain.

Libekeng tsa morao tjena Ho hlahile matšolo le lintlha tse hlahisang setšoantšo se rarahaneng: Lisebelisoa tse mpe tse 239 ho Google Play e bokeletseng ho feta limilione tse 42 tse jarollotsoeng, a banka e ncha Trojan e nang le mekgahlelo e kgonang ho laola sesebedisoa, sehloela se bitsoang Ho fihla ha naha e phunyeletsang Litšoantšo tsa DNG le morero oa ho kopanya karete ka NFC (NGate) ho tloha Europe le ho atolohela ho Latin America.

Sets'oants'o sa ho phahama ha malware a mobile ho Android

Tlaleho ea morao-rao ea Zscaler e senola hore pakeng tsa Phuptjane 2024 le Mots'eanong 2025 Google Play e na le lisebelisoa tse 239 tse kotsi e fetang limilione tse 42 tsa meaho. Ts'ebetso ea malware ea mobile E holile ka 67% selemo le selemo, ka boteng bo khethehileng sehlopheng sa lisebelisoa le tlhahiso, moo bahlaseli ba iketsang eka ke lisebelisoa tse bonahalang li nepahetse.

Phetoho ena e fetolela phetoho e hlakileng ea maqheka: Adware e ikarabella bakeng sa 69% ea ho sibolloaha lelapa la Joker le oela ho 23%. Ho ea ka naha, India (26%), United States (15%), le Canada (14%) e etella pele lipalo-palo, empa Europe, ho fokotsehile. lintlafatso tse ikhethang tsa Italyka keketseho e matla haholo ea selemo le selemo, le litemoso mabapi le ho ata ho ka bang teng ha kotsi ho kontinenteng eohle.

Ha e shebane le boemo bona, Google e tiisitse taolo ea eona holim'a tikoloho ea nts'etsopele ka mehato e eketsehileng ea ho netefatsa boitsebiso bakeng sa ho phatlalatsoa ho Android. Sepheo ke ho phahamisa boemo ba ho kena le ho lateloa, ho fokotsa bokhoni ba linokoane tsa marang-rang ho aba malware mabenkeleng a molao.

Ntle le molumo, ho rarahana ke taba e tšoenyang: Zscaler e totobatsa malapa a mafolofolo haholo, har'a bona Anatsa (Trojan ea banka), Android Void/Vo1d (backdoor ka lisebelisoa tse nang le AOSP ea lefa, e nang le lisebelisoa tse fetang limilione tse 1,6 tse amehileng) le TsebisoRAT e etselitsoeng ho utsoa mangolo-tsoibila le likhoutu tsa 2FA. Europe, mekhatlo ea lichelete le basebelisi ba libanka tse tsamaeang Ba hlahisa kotsi e hlakileng.

Litsebi li supa phetoho ho tloha bomenemeneng ba khale ba likarete tsa mokoloto ho leba ditefello tsa mehala le thekenoloji ya kahisano (phishing, smishing le SIM swapping), e leng se hlokang ho phahamisa bohloeki ba dijithale ba mosebelisi oa ho qetela le ho matlafatsa tšireletso ea likanale tsa mehala tsa mekhatlo.

Android/BankBot-YNRK: Likarolo, Ho fihlella, le Bosholu ba Banka

Bafuputsi ba Cyfirma ba ngotse a trojan ea banka bakeng sa Android E bitsoang "Android/BankBot‑YNRK", e ne e etselitsoe ho etsisa lits'ebetso tse molaong ebe e kenya tšebetsong lits'ebeletso tsa phihlello bakeng sa fumana taolo e felletseng ea sesebelisoa. Ntho e ikhethang ea eona ke litlhaselo tsa overlay: e theha li-skrini tsa ho kena tsa bohata mabapi le lisebelisoa tsa 'nete tsa banka le li-crypto ho hapa lintlha.

Kabo e kopanya le Lebenkele la Lipapali (maqhubung a fetang lihloela) a nang le maqephe a qhekellang a fanang ka li-APK, a sebelisa mabitso a liphutheloana le lihlooho tse etsisang litšebeletso tse tsebahalang. Har'a li-identifiers tsa tekheniki tse fumanoeng ke tse 'maloa SHA-256 hashes 'me ho nahanoa hore ts'ebetso e tla sebetsa tlasa Malware-as-a-Service, e thusang katoloso ea eona ho ea linaheng tse fapaneng, ho akarelletsa le Spain.

Ha e se e kene, e qobella tumello ea ho fihlella, e ikenya joalo ka molaoli oa sesebelisoa, ebe e bala se hlahang skrineng. tobetsa likonopo tsa 'nete ebe u tlatsa liforomoE ka boela ea thibela likhoutu tsa 2FA, ea thetsa litemoso, le phetisetso ea boiketsetsokaofela ntle le ho hlahisa dipelaelo tse bonahalang.

Bahlahlobisisi ba amahanya tšokelo ena le lelapa la BankBot/Anubis, le sebetsang ho tloha 2016, le nang le mefuta e mengata e fapaneng. Li fetoha ho qoba software ea antivirus le litsamaiso tsa mabenkele. Hangata matšolo a lebisitsoe lits'ebetsong tsa lichelete tse sebelisoang haholo, e leng se eketsang tšusumetso e ka bang teng haeba e sa lemohuoe ka nako.

Bakeng sa basebelisi le likhoebo tsa EU, khothaletso ke ho matlafatsa ditaolo tsa tumelloHlahloba litlhophiso tsa phihlello le ho beha leihlo boitšoaro ba lits'ebetso tsa lichelete. Haeba u belaella, ho molemo ho ntša, ho hlahloba sesebelisoa sa hau, le fetola lintlha ka khokahanyo le setheo.

Landfall: Bohloela bo khutsitseng bo sebelisang litšoantšo tsa DNG le liphoso tsa letsatsi le le leng

Patlisiso e 'ngoe, e etelletsoeng pele ke Yuniti ea 42 ea Palo Alto Networks, e sibollotse a spyware bakeng sa Android e bitsoa Ho fihla ha naha e sebelisitseng hampe kotsi ea matsatsi a lefela laeboraring ea ho sebetsana le litšoantšo (libimagecodec.quram.so) ho sebelisa khoutu ha khetha lifaele tsa DNGHoo ho ne ho lekane. amohela setšoantšo ka melaetsa e le hore tlhaselo e ka etsoa ntle le ho sebelisana.

Lipontšo tsa pele li khutletse ho Phupu 2024 mme qeto e ne e arotsoe joalo ka CVE‑2025‑21042 (ka tokiso e eketsehileng ea CVE-2025-21043 likhoeli hamorao). Letšolo le ne le tobane le khatiso e khethehileng Lisebelisoa tsa Samsung Galaxy 'me e bile le tšusumetso e kholo ka ho fetisisa Bochabela bo Hare, le hoja litsebi li hlokomelisa hore na ts'ebetso ena e ka atoloha habonolo hakae sebakeng.

Hang ha e entsoe, Landfall e lumelletse ho ntšoa linepe ntle le ho li kenya lerungmelaetsa, mabitso, le call logs, ho tlatselletsoa ho kenya maekerofounu tshebetsong ka lekunutuModularity ea spyware le ho phehella ha eona nako e ka etsang selemo ntle le ho bonoa e totobatsa tlola ka boqhetseke tse fanoang ke litšokelo tse tsoetseng pele tsa mehala.

Ho fokotsa kotsi, ho bohlokoa Kenya lintlafatso tsa ts'ireletso ea moetsi, fokotsa monyetla oa ho pepeseha lifaeleng tse amohetsoeng ho tsoa ho mabitso a sa netefatsoang, 'me u boloke mekhoa ea ts'ireletso ea sistimi e sebetsa., ka bobeli liteisheneng tsa ts'ebeliso ea motho ka mong le mekhatlong ea lik'hamphani.

Ngate: Ho kopanya likarete tsa NFC, ho tloha Czech Republic ho ea Brazil

Sechaba sa cybersecurity le sona se tsepamisitse maikutlo ho NGAte, e Android malware e etselitsoeng bomenemene ba lichelete bo sebelisang NFC hampe bakeng sa kopi data ya karete le ho li etsisa sesebelisoa se seng. Liphutuho li ngotsoe Europe Bohareng (Czech Republic) tse kenyelletsang ho iketsa libanka tsa lehae le phetoho e latelang e reretsoeng ho basebelisi ba Brazil.

Thetso e kopanya smishing, boenjiniere ba sechaba, le tšebeliso ea PWA/WebAPK le liwebsaete tse etsisang Google Play ho thusa ho kenya. Ha e se e kene, e tataisa motho ea hlokofalitsoeng hore a bulele NFC ebe o kenya PIN, e thibela phapanyetsano, ebe e e fetisetsa ka lisebelisoa tse kang. NFCGate, ho lumella ho ntšoa ha chelete ho li-ATM le litefo tsa POS tse se nang mabitso.

Bafani ba fapaneng Ba lemoha mefuta e fapaneng tlasa li-tag tse kang Android/Spy.NGate.B le Trojan-Banker heuristicsLeha ho se na bopaki ba phatlalatsa ba matšolo a sebetsang Spain, mekhoa e sebelisoang ke e fetisetsoang sebakeng sefe kapa sefe ka libanka tse ngata tse amoheloang tse se nang mabitso.

Mokhoa oa ho fokotsa kotsi: mekhoa e metle

Pele o kenya, nka metsotsoana e seng mekae ho hlahloba mohlophisi, litekanyetso le letsatsi ea sesebelisoa. Hlokomela likopo tsa tumello tse sa lumellaneng le tšebetso e boletsoeng. (haholo-holo Phihlello le Tsamaiso ea sesebelisoa).

Boloka sistimi le lisebelisoa li sebetsa. kamehla e ntjhafaditsweKenya ts'ebetso ea Google Play Protect 'me u hlahlobe khafetsa. Likopanong tsa khoebo, ho eletsoa ho kenya tšebetsong maano a MDM. manane a thibela le tlhokomeliso e sa tloaelehang ea likepe.

Qoba ho khoasolla li-APK ho tsoa lihokelong tsa melaetsa ea SMS, mecha ea litaba ea sechaba, kapa li-imeile, 'me u qhelele thōko... maqephe a etsisang Google PlayHaeba app ea banka e kopa PIN ea karete ea hau kapa e u kopa hore u tšoare karete ea hau haufi le mohala oa hau, belaela 'me u hlahlobe banka ea hau.

Haeba u hlokomela matšoao a tšoaetso (data e sa tloaelehang kapa tšebeliso ea betri, litsebiso tse makatsang(li-skrini tse tobaneng), tlosa data, hlakola lits'ebetso tse belaetsang, hlahloba sesebelisoa sa hau, 'me u fetole lintlha tsa hau. Ikopanye le banka ea hau haeba u e fumana metsamao e sa dumellwang.

Lefapheng la litsebi, E kenyelletsa li-IoC tse hatisitsoeng ke bafuputsi (libaka, li-hashes, le lipakete tse hlokometsoeng) ho manane a hau a li-block, 'me u hokahanya karabelo le li-CSIRT tsa lekala ho li fokotsa likhoele tse ka khonehang ea tšoaetso.

Ecosystem ea Android e feta mohatong oa khatello e phahameng ho tsoa ho botlokotsebe ba marang-rang: ho tloha lisebelisoa tse kotsi mabenkeleng a molao Sena se kenyelletsa li-Trojan tsa banka tse nang le li-overlay, spyware tse sebelisang litšoantšo tsa DNG, le bomenemene ba NFC ka ho etsisa likarete. Ka lintlafatso tsa morao-rao, tlhokomeliso nakong ea ho kenya, le ho beha leihlo ka mafolofolo litumello le litšebelisano tsa banka, hoa khoneha ho li thibela. fokotsa ho pepeseha haholo basebelisi ka bomong le mekhatlo ea Spain le Europe kaofela.

Sengoloa se amanang:

Mokhoa oa ho sebelisa Snapdrop joalo ka mofuta oa 'nete oa AirDrop lipakeng tsa Windows, Linux, Android le iPhone

Alberto Navarro

Ke motho ea chesehelang theknoloji ea fetotseng lithahasello tsa hae tsa "geek" hore e be mosebetsi. Ke qetile lilemo tse fetang 10 tsa bophelo ba ka ke sebelisa theknoloji ea morao-rao le ho thekesela ka mefuta eohle ea mananeo ka lebaka la bohelehele. Hona joale ke sebetsa ka ho khetheha theknolojing ea k'homphieutha le lipapaling tsa video. Lebaka ke hore ka lilemo tse fetang 5 ke 'nile ka sebetsa ho ngolla liwebsaete tse fapa-fapaneng ka theknoloji le lipapali tsa video, ke etsa lihlooho tse batlang ho u fa boitsebiso boo u bo hlokang ka puo e utloisisoang ke bohle.

Haeba u na le lipotso, tsebo ea ka e tloha ho tsohle tse amanang le sistimi ea ts'ebetso ea Windows hammoho le Android bakeng sa mehala ea cellular. 'Me boitlamo ba ka ke ho uena, ke lula ke ikemiselitse ho qeta metsotso e seng mekae le ho u thusa ho rarolla lipotso leha e le life tseo u ka bang le tsona lefatšeng lena la Marang-rang.