Mofuta o mocha oa ts’ebetso ea DarkSword e phatlalalitsoe ho GitHub, e etsa hore khoutu e fihlellehe ho mang kapa mang ea nang le tsebo ea mantlha ea ho amohela. Pesquisadores Basebeletsi ba ts’ireletso ba hlokomelisa hore lifaele tsa HTML le JavaScript li lumella litlhaselo tse potlakileng khahlanong le li-iPhones le li-iPads tse sebelisang liphetolelo tsa khale tsa iOS le iPadOS. Phatlalatso ea sechaba e eketsa kotsi ea ho utsuoa ha data kapa ho senyeha ka kotloloho ho lisebelisoa tse e-so fumane litokiso tsa morao-rao tsa Apple. Especialistas e bonts’a hore litlatsetso li sebetsa ntle le tlhoko ea boitseanape bo tsoetseng pele ba Apple.
Grupo ea Inteligência ea Ameaças ea Google, mmoho le iVerify le Lookout, qalong li hlalositse ka botlalo letoto la ts’ebeliso ea DarkSword bekeng e fetileng. Essa sesebelisoa se kopanya likotsi tse ngata ho senya lisebelisoa tse sebelisang iOS lipakeng tsa mefuta ea 18.4 le 18.7. Litlhaselo li sebelisa liphoso ho WebKit le likarolo tse ling, li lumella ho etsoa ha khoutu ka litokelo tse phahameng le ho ntšoa ha tlhahisoleseling e tebileng.
- Lifaele tse lutiloeng li arolelana lisebelisoa tse tšoanang le tse neng li hlahlobjoa pele ke bafuputsi.
- Mosebelisi e mong le e mong a ka kopitsa litaba mme a li tsamaisa ho seva nakong ea metsotso e seng mekae.
- Lisebelisuoa li shebane haholo le lisebelisoa tse so nchafalitsoeng bakeng sa litokiso tsa maemo a tšohanyetso.
- Apple e se e lokolotse li-patches tse fokotsang liphoso tse sebelisoang ke ketane ea DarkSword.
- Meroalo ea ho qetela e kenyelletsa malapa a malware a kang GHOSTKNIFE, GHOSTKNIFE, le GHOSTSABER.
Lintlha tsa tekheniki tsa ho lutla
Leak e kenyelletsa lifaele tse bonolo tse nolofalletsang libapali tse lonya ho li sebelisa hape. Matthias Frielingsdorf, mothehi-‘moho oa iVerify, o hlalositse boemo bo tebile hobane khoutu e bonolo ho ikamahanya le maemo le ho e sebelisa. Ele e hlokometse hore mesebetsi ha e hloke tsebo e tebileng ea iOS ho sebetsa, e leng ho eketsang monyetla oa ho sebelisoa ke linokoane tse tloaelehileng. Ho ba bonolo ha lifaele tsa HTML le JavaScript ho lumella batšoantšisi ba nang le lisebelisoa tse fokolang ho pheta-pheta litlhaselo ka nako e khutšoanyane.
Phatlalatso ho GitHub e etsahetse ka mor’a phatlalatso ea pele ea bofokoli ba Coruna le DarkSword. Ambas liketane li itšetlehile ka litokiso tseo Apple e entseng hore li fumanehe ho liapdeite tse kang iOS 16.7.15, iOS 15.8.7, le tse ling tsa iPadOS. Dispositivos ha e tsamaellane le liphetolelo tse ncha tsa sistimi e ntse e fumana likotlo tsena tsa ts’ireletso.
Tšusumetso ho basebelisi ba lisebelisoa tsa khale
Li-iPhones le li-iPads tse ngata tse sebelisoang lefatšeng ka bophara li ntse li sebetsa liphetolelong tsa khale ka lebaka la mefokolo ea lisebelisoa. Ho lutla ho eketsa menyetla ea matšolo a mangata a sebelisang liwebosaete tse senyehileng ho fana ka tlatsetso ntle le tšebelisano ea basebelisi ho feta ho fihlella leqephe. Litefiso tsa ho qetela li ka utsoa mangolo a bopaki, data ea forensic le tlhaiso-leseling ea kopo, ho kenyeletsoa le li-wallet tsa cryptocurrency. Apple e fane ka polelo e tiisang tlhoko ea ntlafatso ea hanghang.
Moetsi o netefalitse hore o tseba ka ho lutla hoo mme a pheta hore likhechana tsa tšohanyetso li lokollotsoe ka la 11 Hlakubele ho koahela liphoso. Especialistas e khothaletsa hore beng ba iPhone ba hlahlobe nalane ea bona ea ntlafatso ‘me ba bulele mokhoa oa ho hlahloba lisebelisoa ka bohona. Ho kenya li-patches tsa morao-rao ho fokotsa haholo sebaka sa tlhaselo esita le lisebelisoa tse sa tšehetseng liphetolelo tse kholo tsa morao-rao tsa iOS.
Likhothaletso ho tsoa ho Apple le litsebi
Khampani e totobalitse hore Modo ea Bloqueio e fana ka tšireletso e eketsehileng khahlanong le liteko tse tsoetseng pele tsa ho kena-kenana. Usuários ea mefuta ea khale e lokela ho sheba hanghang litlhophiso tsa software ho kenya mefuta e teng ea ts’ireletso. Pesquisadores hlokomela hore ho ba bonolo ha lifaele ho thusa ho ikamahanya le maemo ke batho ba boraro. Sechaba sa tšireletso se shebile keketseho e ka bang teng ea liketsahalo libekeng tse tlang.
Ketane ea DarkSword e sebelisa bofokoli bo fapaneng bo tšeletseng ho fihlela ts’ebetso ea khoutu ea boemo ba kernel. Três ea tsena e ile ea sebelisoa joalo ka matsatsi a lefela pele ho litokiso tsa Apple. Kit e lumella ho romelloa ha meroalo e lefshoang e lebisitsoeng ho nts’etsopele ea data e potlakileng e lateloang ke ho hloekisa sesebelisoa. Campanhas Litlhaselo tse fetileng tse amanang le setšoantšisi sena li ne li ama litlhaselo ka liwebsaete tsa mekoting ea metsi.
Mehato e thibelang ho sireletsa
Basebelisi ba lokela ho etelletsa pele ntlafatso ea mefuta ea morao-rao e fumanehang ea iOS kapa iPadOS. Ativar kapa Modo ea Bloqueio e bohlokoa maemong a kotsi haholo. Evitar ho kena lihokelong tse belaetsang le ho boloka sebatli sa hau se nchafalitsoe ho tlatselletsa ts’ireletso ea mantlha khahlano le ts’ebetso e thehiloeng ho WebKit. Especialistas e hatisa hore tlhokomelo ea kamehla ea tsamaiso ea ts’ebetso e ntse e le mokoallo o ka sehloohong khahlanong le litšokelo tsa mofuta ona.
Apple e boloka likanale tsa kabo ea li-patch le bakeng sa lisebelisoa tsa khale, e bonts’a boitlamo ba ts’ireletso ea nako e telele ea basebelisi. Ketsahalo ea hajoale e sebetsa e le khopotso e sebetsang ea ‘nete ena ho Apple ecosystem. DarkSword e ts’ehetsa mefuta ea iOS ea 18.4 ho isa ho 18.7 mme esale e bonoa matšolong a batšoantšisi ba bangata ho tloha ka Pulungoana 2025.
Likotsi tse holisitsoeng ka mokhoa o bonolo oa khoutu
Lifaele tse hatisitsoeng li na le lintlha tse hlalosang hore na liphoso li sebetsa joang le ho kenya ts’ebetsong ea ts’ebetso. Karolo ea Essa e nolofalletsa batho ba bang ho ikamahanya le maemo. Pesquisadores hlokomelisa hore kotsi ea ho ata ha matšolo a tloaelehileng a botlokotsebe e hotse haholo kamora ho lutla. Mehaho ea motheo e arolelanoang pakeng tsa liphetolelo tse hlahlobiloeng le tse lutiloeng li bontša tsoelo-pele ea baqapi ba pele.
Sebopeho sa modular se lumella batšoantšisi ba fapaneng ho ikamahanya le lisebelisoa bakeng sa merero e khethehileng, ho tloha ho bohloela ho ea ho bosholu ba lichelete. Phatlalatso ena e etsa hore ho be le monyetla oa ho fumana sesebelisoa se neng se lekanyelitsoe ho lihlopha tse tsoetseng pele. Manter Sistimi e nchafalitsoeng ea ts’ebetso e sireletsa khahlanong le liketso tse tsebahalang mme e fokotsa monyetla oa litlhaselo tse ncha.