Mac Malware Notebook

by Tom Nelson

Mac malware don kallo don

Apple da Mac sun samu rabon tsaro a tsawon shekarun, amma ga mafi yawan bangarorin, ba a yi yawa a cikin hanyar da ake kaiwa ba. A halin da ake ciki, wanda ya bar wasu masu amfani da Mac masu mamaki idan suna buƙatar aikace-aikacen riga-kafi .

Amma fatan cewa sunan Mac din ya isa ya hana mayar da martani game da malware coders ba abu ne mai mahimmanci ba, kuma Mac a cikin 'yan shekarun nan yana ganin wani uptick a cikin malware da ke amfani da masu amfani. Ko da kuwa dalilin da yasa, Mac malware ya kasance akan tashi, kuma jerinmu na Mac malware zai iya taimaka maka ka ci gaba da ci gaba da barazana.

Idan ka ga kanka yana bukatar Mac antivirus app don gane da kuma cire wani daga cikin wadannan barazanar, duba kundinmu ga Mafi kyawun Mac Antivirus Programmes .

FruitFly - kayan leken asiri

Abin da yake
FruitFly shi ne bambancin malware da ake kira kayan leken asiri.

Abin da Yayi
FruitFly da bambance-bambancen su ne kayan leken asiri waɗanda aka tsara su yi aiki a hankali a bango da kuma kama hotuna na mai amfani ta amfani da kamarar Mac ɗin da aka gina, kama hotuna da allon, da kuma shiga keystrokes.

Matsayi na yanzu
An katange FruitFly ta ɗaukakawa zuwa Mac OS. Idan kana gudana OS X El Capitan ko daga bisani FruitFly ba kamata bane.

Rashin kamuwa da kamuwa da ƙwayoyin yana da rauni ƙwarai ko watakila masu amfani da 400. Har ila yau yana kama da kamuwa da asali ta asali ne ga masu amfani a masana'antun halittu, wanda zai iya bayyana rashin shiga cikin ƙananan asali na FruitFly.

Shin har yanzu yana aiki?
Idan kun yi amfani da FruitFly a kan Mac ɗinku, mafi yawan kayan aikin riga-kafi na Mac sun iya ganewa da kuma cire kayan leken asiri.

Ta yaya yake samuwa a kan Mac

An shigar da FruitFly asali ta hanyar tricking wani mai amfani don danna kan haɗin don fara tsarin shigarwa.

Mac Sweeper - Scareware

Abin da yake
MacSweeper na iya zama kayan farko na Mac scareware .

Abin da Yayi
MacSweeper yayi shawarar bincika Mac don matsalolin, sa'annan yayi ƙoƙari ya biya biyan kuɗi daga mai amfani don "gyara" matsalolin.

Yayinda kwanakin MacSweeper sun kasance suna da tsararren tsabtace kayan aiki da ƙwarewa wadanda suke ba da damar tsaftace Mac ɗinka da inganta aikinsa, ko kuma duba Mac ɗinka don ramuka tsaro sa'annan bayar da su don gyara su .

Matsayi na yanzu
MacSweeper ba ta aiki ba tun 2009, ko da yake bambance-bambance na zamani ya bayyana kuma ya ɓace sau da yawa.

Shin Sill Active?
Abubuwan da suka kasance kwanan nan da suka yi amfani da wannan mahimmanci shine MacKeeper wanda ke da suna don saka adware da scareware. Anyi la'akari da MacKeeper da wuya a cire .

Ta yaya yake samuwa a kan Mac
MacSweeper an samo asali ne a matsayin kyauta ta sauke don gwada app. Haka kuma an rarraba malware tare da wasu aikace-aikace da aka boye a cikin masu shigarwa.

KeRanger - Ransomware

Abin da yake
KeRanger shine kyan gani na farko na fansa a cikin Macs.

Abin da Yayi
A farkon shekarar 2015 wani mai bincike na tsaro na Brazil ya wallafa wata hujja game da ma'anar lambar da ake kira Mabouia wadda ta yi niyya ga Macs ta hanyar ɓoye fayilolin mai amfani da kuma buƙatar fansa don maɓallin lalata.

Ba da daɗewa ba bayan gwaje-gwaje na Mabouia a cikin Lab, wani ɗan littafin da ake kira KeRanger ya fito a cikin daji. An gano shi a watan Maris na shekara ta 2016 ta hanyar Palo Alto Networks, KeRange ya yada ta hanyar shigar da shi zuwa Transmission wani mai amfani da app na BitTorrent app. Da zarar an shigar da KeRanger, shirin ya kafa tashar sadarwa tare da uwar garken nesa. A wani makomar gaba, uwar garken nesa zai aika da maɓallin boye-boye don amfani da shi don ɓoye duk fayiloli mai amfani. Da zarar fayiloli sun ɓoye kayan aikin KeRanger zai bukaci biyan bashin da ake buƙatar da ake buƙata don buše fayilolinku.

Matsayi na yanzu
Hanyar asali na kamuwa da cuta ta amfani da Shigowar Transmission da kuma mai sakawa ya tsabtace shi daga lambar laifi.

Shin har yanzu yana aiki?
KeRanger da sauran bambance-bambance har yanzu ana daukar aiki sosai kuma an sa ran za a ƙaddamar da masu ƙirar sabon na'ura don aikawa da fansa.

Za ka iya samun karin bayani game da KeRanger da kuma yadda za a cire aikace-aikacen ransomware a cikin jagorancin: KeRanger: Na farko Mac Ransomware a cikin Angance An gano .

Ta yaya yake samuwa a kan Mac
Siffar ta atomatik ita ce hanya mafi kyau ta bayyana hanyar rarraba. A duk lokuta har yanzu KeRanger ya kara daɗaɗɗa ga aikace-aikacen halatta ta hanyar shiga shafin yanar gizon mai ginawa.

APT28 (Xagent) - Kayan leken asiri

Abin da yake
APT28 bazai kasance wani ɓangare na malware ba, amma ƙungiyar da take cikin halittarsa da rarraba shi ne, Sofacy Group, wanda aka fi sani da Fancy Bear, wannan rukunin da ke da alaka da gwamnatin Rasha an yi imanin cewa shi ne a baya a kan Jamusanci na cyberattacks. majalisar, gidajen talabijin Faransa, da fadar White House.

Abin da Yayi
APT28 da zarar an sanya a kan na'urar ya haifar da ƙofar baya ta amfani da wani ƙirar mai suna Xagent don haɗi zuwa Komplex Downloader wani uwar garke mai nisa wanda zai iya shigar da wasu nau'ikan kayan leken asiri waɗanda aka tsara don tsarin aiki na rundunar.

Masarrafan leken asiri na Mac wanda ya zuwa yanzu sun haɗa da masu bincike don karɓar duk wani rubutu da ka shigar daga cikin keyboard, allon yana ba da damar masu hari su ga abin da kake yi akan allon, kazalika da masu sa ido na fayilolin da za su iya aikawa da fayilolin zuwa ga nesa uwar garken.

APT28 da Xagent an tsara su ne da farko ga bayanai da aka samo a kan Mac din da kuma duk wani na'ura na iOS wanda ke hade da Mac kuma ya aika da bayanin zuwa mai haɗari.

Matsayi na yanzu
Anyi amfani da samfurin Xagent da Apt28 na yanzu ba barazanar ba saboda uwar garken nesa ba ta aiki ba kuma Apple ya inganta tsarin tsarin antimalware da aka gina a cikin allon don Xagent.

Shin har yanzu yana aiki?
Mai aiki - Asali na ainihi ya bayyana ba zai kasance aiki ba tun lokacin da siginar umarni da sarrafawa suka tafi offline. Amma wannan ba ƙarshen APT28 da Xagent ba. Ya bayyana lambar tushe don an sayar da malware kuma sababbin sassan da aka sani da Proton da ProtonRAT sun fara yin zagaye

Hanyar Infection
Ba a sani ba, ko da yake yanayin yana iya amfani da Trojan ɗin ta hanyar aikin injiniya.

OSX.Proton - kayan leken asiri

Abin da yake
OSX.Proton ba sabon bidiyon kayan leken asiri amma ga wasu masu amfani da Mac, abubuwa sun zama mummunan a watan Mayun lokacin da aka katange appel ɗin Handbake da aka saɗa malware zuwa Proton. A tsakiyar Oktoba an gano kayan leken asirin Proton a ɓoye cikin Mac Apps masu mahimmanci wanda Eltima Software ya samar. Musamman Elmedia Player da Folx.

Abin da Yayi
Proton ne mai kariya mai nisa wanda yake samar da damar samun damar ƙaddamarwa ta hanyar ƙyale cikakken tsarin Mac. Mai ƙwaƙwalwa zai iya tattara kalmomin shiga, maɓallin VPN, shigar da aikace-aikacen kamar masu amfani da juna, yin amfani da asusun iCloud, da yawa.

Yawancin kayan aikin riga-kafi na Mac sun iya gano kuma cire Proton.

Idan ka ci gaba da duk wani bayanan katin bashi a cikin maɓallin keɓaɓɓen Mac ɗinka, ko kuma masu jagorancin kalmar sirri na ɓangare na uku , ya kamata ka yi la'akari da tuntuɓar bankuna masu ba da kyauta kuma ka nemi a daskare akan waɗannan asusun.

Matsayi na yanzu
Masu rarraba na'urorin da suke da manufa ta farko sun riga sun keta kayan leken asirin Proton daga samfurori.

Shin har yanzu yana aiki?
Proton har yanzu ana daukar aiki kuma masu haɗari za su sake fitowa tare da sabon salo da kuma sabon asusun rarrabawa.

Hanyar Infection
Siffar da ke kai tsaye - Ta amfani da rabawa na ɓangare na uku, wanda bai san abin da ke cikin malware ba.

KRACK - Binciken Shafin Farko

Abin da yake
KRACK wata ƙaddamarwa ce game da tsarin tsaro na WPA2 Wi-Fi da yawancin cibiyoyin sadarwa ke amfani dashi. WPA2 yana amfani da mota mai tsayi 4 don kafa tashar sadarwa ta ɓoye a tsakanin mai amfani da maɓallin shiga mara waya.

Abin da Yayi
KRACK, wanda shine ainihin jerin hare-haren da aka yi a kan mota guda 4, yana bawa mai haɗari damar samun cikakken bayani don ya iya rage bayanan rahotannin ko saka sabon bayani a cikin sadarwa.

Ƙarƙashin KRACK a cikin sadarwa na Wi-Fi yana da nasaba da kowane na'ura Wi-Fi wanda ke amfani da WPA2 don kafa sakonni na aminci.

Matsayi na yanzu
Apple, Microsoft, da sauransu sun riga sun riga sun karbi sabuntawa don kayar da hare-haren KRACK ko suna shirin yin hakan nan da nan. Don masu amfani da Mac, sabunta tsaro ya riga ya bayyana a cikin beta na macOS, iOS, watchOS, da tvOS, kuma dole ne a sake bugawa ga jama'a a cikin gajeren ƙananan OS.

Babban damuwa shine dukkanin IoT (Intanet na Abubuwa) da ke amfani da Wi-Fi don sadarwa, ciki har da ma'aunin katako, gidaje masu gado, tsaro gida, na'urorin kiwon lafiya, kuna samun ra'ayin. Yawancin waɗannan na'urori zasu buƙaci sabuntawa don sa su amintacce.

Tabbatar da sabunta na'urarka da zarar an sami sabunta tsaro.

Shin har yanzu yana aiki?
KRACK zai kasance aiki na dogon lokaci. Ba har sai kowane na'ura Wi-Fi da ke amfani da tsarin tsaro na WPA2 ko an sabunta shi don hana yakin KRACK ko kuma ya yiwu ya yi ritaya kuma ya maye gurbin da sababbin na'urorin Wi-Fi.