Toban nooc oo cusub oo malware-ka bangiyada ah ayaa soo muuqday sanadkan Android, kuwaas oo si wada jir ah diiradda saaraya 985 bangiyada iyo codsiyada fintech ee hay'adaha maaliyadeed ee 61 waddan.
Trojans Banking waa malware kuwaas oo bartilmaameedsada xisaabaadka bangiga internetka ee dadka iyo lacagta iyaga oo isku dayaya in ay xadaan aqoonsiga gelitaanka iyo cookies-ka fadhiga, ka gudbaan ilaalinta aqoonsiga laba-geesoodka ah, mararka qaarkoodna si toos ah u sameeya macaamil ganacsi. Marka lagu daro tobanka cusub ee la bilaabay 2023, 19 kale oo laga soo bilaabo 2022 ayaa la bedelay si ay u koraan awoodahooda cusub oo ay u kordhiyaan casriyeynta hawlahooda.
Bulshada Zimperium, kaas oo ka shaqeeya ammaanka mobilada, ayaa falanqeeyay dhammaan 29-kii, waxaana uu sheegay in isbeddellada cusub ay ka mid yihiin waxyaabo ay ka mid yihiin:
- Ku darida nidaamka wareejinta otomaatiga ah (ATS) kaas oo qabta calaamadaha MFA, bilaabaya wax kala iibsiga, lacagahana wareejinaya.
- Ku lug lahaanshaha tillaabooyinka injineernimada bulshada halkaas oo dambiilayaasha internetka ay iska dhigaan shaqaalaha taageerada macaamiisha iyo toosinta dhibbanayaasha inay soo dejiyaan Trojans, tusaale ahaan.
- Lagu daray ikhtiyaar wadaag toos ah oo loogu talagalay isdhexgalka tooska ah ee qalabka cudurka qaba.
- U soo bandhigista ku-qoritaanka malware-ka dambiilayaasha kale ee internetka $3 ilaa $000 bishii.
Tilmaamaha caadiga ah ee laga heli karo inta badan trojans-yada la baaray waxaa ka mid ah keylogging, phishing overovers, iyo xatooyada fariinta SMS.
Sawir qaade
Arrin kale oo walaac leh ayaa ah in Trojans-ka bangiyada ay ka guurayaan "kaliya" xatooyada aqoonsiga bangiga iyo lacagaha si ay u beegsadaan warbaahinta bulshada, fariimaha iyo xogta shakhsi ahaaneed.
Toban Trojans Banking cusub
Zimperium waxay baadhay toban Trojans bangi oo cusub, oo leh in ka badan 2 kala duwanaansho ah oo ku wareegaya meel bannaan, iyaga oo iska dhigaya qalab gaar ah, barnaamijyada wax soo saarka, marinnada madadaalada, ciyaaraha, sawir qaadista iyo agabka waxbarashada.
Tobanka cusub ee Trojans ayaa hoos ku taxan:
- Nexus: MaaS (malware sida adeeg) oo leh 498 nooc oo bixiya wadaagis shaashad toos ah, oo lagu beegsanayo 39 codsi oo 9 waddan ah.
- Godfather: MaaS oo leh 1 nooc oo diiwaangashan oo lagu beegsanayo 171 codsiyo bangi oo ku yaal 237 waddan. Waxay taageertaa wadaagista shaashadda fog
- Pixpirate: Faras Trojan ah oo leh 123 nooc oo caan ah oo ay ku shaqeeyaan moduleka ATS. Waxay diiradda saaraysaa toban codsiyo bangi.
- Saderat: Faras Trojan ah oo leh 300 oo kala duwan oo bartilmaameedsanaya 8 codsiyada bangiyada ee 23 waddan.
- Hook: MaaS oo leh 14 kala duwanaansho oo la yaqaan oo leh wadaag shaashad toos ah. Waxa ay beegsataa 468 apps oo ku yaala 43 wadan waxaana laga kireeyaa dambiilayaasha internetka lacag dhan $7 bishii.
- PixBankBot: Faras Trojan ah oo leh saddex nooc oo ilaa hadda diiwaangashan, oo loogu talagalay afar codsiyo bangiyada. Waxaa lagu qalabeeyay moduleka ATS dhexdhexaadinta khiyaanada suurtagalka ah ee qalabka.
- Xenomorph v3MaaS oo leh lix nooc oo awood u leh hawlgallada ATS ee lagu beegsanayo 83 codsiyada bangiyada ee 14 waddan.
- gorgor: Faras Trojan ah oo leh sagaal nooc oo kala duwan oo lagu beegsanayo 122 codsiyada bangiyada ee 15 waddan.
- BrasDex: Trojan oo bartilmaameedsanaya siddeed codsi oo bangiyada Brazil ah.
- Jiirka riyaha: Faras Trojan ah oo leh 52 nooc oo caan ah oo taageeraya moduleka ATS oo bartilmaameedsanaya lix codsiyo bangi.
Marka la eego noocyada malware-ka ee jiray 2022 oo la cusboonaysiiyay 2023, Teabot, Exobot, Mysterybot, Medusa, Cabosous, Anubis, iyo Coper waxay ilaashadaan waxqabad muuqda.
Haddii aan qiimeyno dalalka inta badan lagu bartilmaameedsado weerarrada, markaas Mareykanka (109 apps bangiyada la beegsaday) ayaa ku jiri doona kaalinta koowaad, waxaa ku xiga Boqortooyada Ingiriiska (48 apps bangiyada), Italy (44 apps), Australia (34) , Turkey (32), France (30), Spain (29), Portugal (27), Germany (23) iyo Canada (17).
Waxaa laga yaabaa inaad xiisaynayso
Sidee loo nabadgeliyaa?
Haddii aad rabto inaad naftaada ka ilaaliso hanjabaadahaas, way fiican tahay inaad iska ilaaliso soo dejinta faylasha APK ee ka baxsan Google Play, si aad u hubiso, xitaa goobtan, si taxadar leh u akhri faallooyinka isticmaalaha oo hubi horumariyaha ama daabacaha codsiga. Inta lagu jiro rakibidda, fiiro gaar ah u yeelo rukhsadaha loo baahan yahay hana siin software-ka haddii aadan hubin.
Haddi abka uu codsado in laga soo dejiyo cusboonaysiinta isha dibadeed marka ugu horeysa ee la bilaabayo, tani waxay sabab u tahay shakiga, waxaana ugu xikmad badan in la iska ilaaliyo gabi ahaanba haddi ay suurtagal tahay. Ugu dambeyntiina, talo-bixin caadi ah, waligaa ha gujin xiriiriyeyaasha ku dhex jira SMS ama fariimaha iimaylka ee soo diraha aan la aqoon.
