Key Takeaways
- Cov kws tshawb fawb tau pom tias iPhones tuaj yeem ua rau muaj kev cuam tshuam rau kev nyab xeeb txawm tias thaum kaw.
- Thaum lub iPhone lub zog tawm, cov chips wireless, suav nrog Bluetooth, khiav siv lub zog qis.
- Cov neeg ua phem phem tuaj yeem ua kom zoo dua ntawm kev txo hwj chim hom siv malware.
Txawm tias kev kaw koj lub iPhone yuav tsis ua rau nws muaj kev nyab xeeb los ntawm cov neeg nyiag nkas, tab sis cov kws tshaj lij hais tias cov neeg feem coob tsis muaj kev txhawj xeeb ntau.
Cov kws tshawb fawb ntawm lub tebchaws Yelemes Technical University of Darmstadt tau pom tias iPhones tuaj yeem ua rau muaj kev cuam tshuam rau kev nyab xeeb txawm tias thaum lub hwj chim tawm. Wireless chips, suav nrog Bluetooth, khiav siv lub zog qis thaum lub hwj chim tawm. Cov neeg ua phem ua phem tuaj yeem ua kom zoo dua ntawm kev txo hwj chim hom siv malware.
"Thaum tus neeg siv kaw lawv lub cuab yeej los ntawm lub xov tooj cov ntawv qhia zaub mov lossis lub zog khawm, lawv muaj kev ntseeg tsim nyog tias txhua tus txheej txheem raug kaw, tab sis qhov ntawd tsis yog li ntawd," Eugene Kolodenker, tus neeg ua haujlwm laus kev ruaj ntseg txawj ntse engineer ntawm lub tuam txhab kev ruaj ntseg cybersecurity Lookout, uas tsis koom nrog kev tshawb fawb German, hais rau Lifewire hauv kev sib tham hauv email. "Cov kev pabcuam xws li FindMy yuav tsum ua haujlwm txawm tias thaum lub cuab yeej raug kaw. Qhov no yuav tsum muaj lub tshuab ua haujlwm txuas ntxiv."
Zombie iPhones
Cov kws tshawb fawb German tau tshuaj xyuas iPhone lub hwj chim qis (LPM) uas ua rau muaj kev sib txuas lus nyob ze, ultra-wideband, thiab Bluetooth.
"Kev siv LPM tam sim no ntawm Apple iPhones tsis pom tseeb thiab ntxiv kev hem thawj tshiab," cov kws tshawb fawb tau sau rau hauv daim ntawv."Vim tias LPM txhawb nqa raws li iPhone cov khoom siv kho vajtse, nws tsis tuaj yeem raug tshem tawm nrog kev hloov kho tshiab. Yog li, nws muaj qhov cuam tshuam ntev rau tag nrho cov qauv kev ruaj ntseg iOS. Rau qhov zoo tshaj plaws ntawm peb txoj kev paub, peb yog thawj tus uas saib mus rau hauv cov ntaub ntawv tsis muaj ntaub ntawv. LPM nta qhia hauv iOS 15 thiab nthuav tawm ntau yam teeb meem."
Kolodenker piav qhia tias cov khoom siv txawb niaj hnub no muaj ntau lub khoos phis tawj sib txawv. Feem ntau, cov neeg uas cuam tshuam feem ntau thaum siv lub xov tooj smartphone yog daim ntawv thov processor (AP) thiab baseband processor (BP).
"Cov no yog qhov ua haujlwm feem ntau ntawm kev ua haujlwm thiab hu lub peev xwm," nws hais ntxiv. "Txawm li cas los xij, muaj ntau cov txheej txheem ntxiv tam sim no hauv cov xov tooj, xws li Secure Enclave Processor thiab Bluetooth Processor ntawm iPhones. Cov txheej txheem no tuaj yeem siv ntau yam xws li AP thiab BP."
Tsis txhob txhawj ntau dhau txog kev hem thawj thaum koj lub xov tooj raug kaw, txawm li cas los xij. Kolodenker hais tias "Lub sab ci ntsa iab yog qhov kev hem thawj rau lub hom phiaj stand-by processors uas tab tom khiav thaum lub cuab yeej raug kaw yog qhov theoretical," Kolodenker hais.
Thomas Reed, tus thawj coj ntawm Mac & Txawb ntawm Malwarebytes, tus tsim cov software tiv thaiv malware, tau hais hauv email tias tsis muaj tus paub malware siv BLE firmware cuam tshuam kom nyob twj ywm thaum lub xov tooj 'tawm.'
Yog tias koj yuav tsum tsis txhob taug qab ib ntus, tso koj lub xov tooj rau qhov chaw uas tsim nyog xav tias koj yuav siv sijhawm sijhawm.
Nws hais ntxiv tias "ntxiv mus, tshwj tsis yog tias koj yuav raug tsom los ntawm lub tebchaws-xeev tus yeeb ncuab-piv txwv li, yog tias koj yog ib tus neeg txhawb nqa tib neeg txoj cai lossis cov neeg sau xov xwm thuam txog kev tsim txom-koj tsis muaj peev xwm ua tau. khiav mus rau qhov teeb meem no, "nws hais ntxiv. "Yog tias koj ua tau yog lub hom phiaj muaj peev xwm rau tus yeeb ncuab hauv lub tebchaws, tsis txhob ntseeg tias koj lub xov tooj puas tau tawm lawm."
Andrew Hay, tus thawj coj ua haujlwm ntawm LARES Consulting, lub tuam txhab kev paub txog kev ruaj ntseg cov ntaub ntawv, tau hais hauv email tias rau cov neeg siv nruab nrab, qhov "kev hem" no yuav tsis cuam tshuam rau lawv me ntsis vim nws tsuas yog tam sim no ntawm jailbroken. iPhone.
"Ib tus neeg siv yuav tsum tawm ntawm lawv txoj hauv kev los jailbreak lawv iPhone, thiab ntau qhov kev kawm yav dhau los / kev tshawb pom vam khom qhov tseeb," nws hais ntxiv. "Yog tias tus neeg siv xav kom muaj kev nyab xeeb raws li qhov ua tau, lawv yuav tsum txuas ntxiv siv cov haujlwm ua haujlwm (thiab kuaj) cov haujlwm, cov apps, thiab cov yam ntxwv muab los ntawm cov chaw tsim khoom lag luam."
Tiv Thaiv Koj Tus Kheej
Khaws koj cov ntaub ntawv xov tooj kom nyab xeeb los ntawm cov neeg nyiag khoom siv ntau dua li tus kais ntawm lub hwj chim khawm, Reed taw qhia. Rau cov neeg raug tsim txom hauv tsev, Reed tau hais tias yog tias koj nyob rau hauv qhov xwm txheej uas tus neeg tsim txom saib xyuas koj qhov chaw nyob, koj yuav tsum paub tias kev kaw koj lub xov tooj yuav tsis txwv qhov kev taug qab.
"Rau cov xwm txheej zoo li no, peb qhia nrhiav kev pab, vim tias kev tsis ua haujlwm ntawm kev taug qab tuaj yeem muaj qhov tshwm sim tsis zoo," nws hais ntxiv. "Yog tias koj yuav tsum tsis txhob taug qab ib ntus, tawm hauv koj lub xov tooj mus rau qhov chaw uas nws tsim nyog xav tias koj yuav siv sijhawm qee lub sijhawm."
Marco Bellin, CEO ntawm Datacappy, uas ua rau kev ruaj ntseg software, tau hais tias tib txoj hauv kev los tiv thaiv koj tus kheej tiag tiag yog siv lub tawb Faraday, uas thaiv tag nrho cov teeb liab ntawm koj lub xov tooj.
"Qhov teeb meem yog tias tib neeg feem coob yuav tsis siv ib qho," nws ntxiv. "Lawv encumbering vim lawv tsis tso cai rau koj lub xov tooj nkag mus rau kev sib txuas lus, tsis muaj xov tooj, ntawv nyeem, los yog social media ceeb toom, thiab cov neeg feem coob yuav tso tseg lawv txoj kev nyab xeeb kom yooj yim. Kuv siv ib qho rau kev mus ncig, tab sis kuv yuav yog. siv nws ntau zaus tam sim no."
