Adam Kos I-Apple ifake icala ngokumelene ne-NSO Group kanye nenkampani engumzali ukuze ibenze baphendule ngokugadwa okuhlosiwe kwabasebenzisi be-Apple. Icala libe selinikeza ulwazi olusha mayelana nokuthi i-NSO Group "ithelele kanjani" izisulu zezisulu nge-spyware yayo ye-Pegasus.
I-Pegasus ingafakwa ngokuyimfihlo kumakhalekhukhwini nakwamanye amadivaysi afakwe izinguqulo ezihlukahlukene ze-iOS nezinhlelo zokusebenza ze-Android. Ngaphezu kwalokho, izambulo ziphakamisa ukuthi i-Pegasus ingangena kuyo yonke i-iOS yakamuva kuze kube yinguqulo engu-14.6. Ngokusho kweThe Washington Post neminye imithombo, iPegasus ayivumeli kuphela ukuqapha konke ukuxhumana ocingweni (i-SMS, ama-imeyili, ukusesha ngewebhu), kodwa futhi ingalalela lapho ishaya ucingo, ilandelele indawo, futhi isebenzise umbhobho kamakhalekhukhwini ngokucashile. kanye nekhamera, ngaleyo ndlela ilandelela ngokugcwele abasebenzisi.
Kungaba njalo okuthakaselayo
Ngaphansi kwesizathu esihle
I-NSO ithi ihlinzeka "ohulumeni abagunyaziwe ngobuchwepheshe bokubasiza ukulwa nobuphekula nobugebengu" futhi isikhiphe izingxenye zezinkontileka zayo ezidinga amakhasimende ukuthi asebenzise imikhiqizo yawo kuphela ukuphenya ubugebengu nokuvikela ukuphepha kwezwe. Ngaso leso sikhathi, uthe uhlinzeka ngokuvikeleka okungcono kakhulu kwamalungelo abantu kulo mkhakha. Ngakho-ke, njengoba ubona, yonke into enhle iphenduka ibe yimbi ngokushesha noma kamuva.
Ungayisetha kanjani kabusha iphasiwedi ye-Apple ID ku-iPhone:
I-spyware iqanjwe ngehhashi lenganekwane elinamaphiko i-Pegasus - iyiThrojani "endiza emoyeni" (ukuze iqondise amafoni). Inkondlo kanjani, akunjalo? Ukuze uvimbele i-Apple ekuqhubekeni nokuhlukumeza futhi ilimaze abasebenzisi bayo, ngokwembono efaka phakathi thina kanye nawe, i-Apple ifuna umyalo ongapheli wokuvimbela i-NSO Group ekusebenziseni noma iyiphi isofthiwe ye-Apple, amasevisi noma amadivayisi. Okubuhlungu ngakho konke lokhu ukuthi ubuchwepheshe bokuqapha be-NSO buxhaswe wumbuso uqobo.
Kodwa-ke, ukuhlaselwa kuhloswe kuphela enanini elincane kakhulu labasebenzisi. Umlando wokusetshenziswa kabi kwale nhloli ukuze kuhlaselwe izintatheli, izishoshovu, abaphikisayo, izifundiswa kanye nezikhulu zikahulumeni nawo ubhalwe phansi esidlangalaleni. "Amadivayisi we-Apple ayizingxenyekazi zekhompiyutha ezivikeleke kakhulu emakethe," kusho uCraig Federighi, iphini likamongameli omkhulu wakwa-Apple kwezobunjiniyela besoftware, ecela ushintsho oluqinisekile.
Kungaba njalo okuthakaselayo
Izibuyekezo zizokuvikela
Isikhalazo sezomthetho se-Apple sinikeza ulwazi olusha mayelana nethuluzi le-NSO Group's FORCEDENTRY, elisebenzisa ukuba sengozini okubhaciwe manje okwasetshenziswa ngaphambilini ukuze kungene idivayisi ye-Apple yesisulu futhi kufakwe inguqulo yakamuva ye-Pegasus spyware. Icala lihlose ukuvimbela i-NSO Group ukuthi iqhubeke nokulimaza abantu usebenzisa imikhiqizo namasevisi we-Apple. Icala liphinde lifune ukunxeshezelwa ngokuphulwa okukhulu komthetho wombuso kanye nowezwe wase-U.S. yi-NSO Group ngenxa yemizamo yayo yokukhomba nokuhlasela i-Apple nabasebenzisi bayo.
Izilungiselelo ze-Keychain ku-iCloud
I-iOS 15 ifaka phakathi izivikelo ezintsha eziningi zokuphepha, okuhlanganisa ukuthuthukiswa okubalulekile kumshini wokuphepha we-BlastDoor. Yize i-spyware ye-NSO Group iqhubeka nokuvela, i-Apple ayikabuboni ubufakazi bokuhlasela okuphumelelayo kumadivayisi asebenzisa i-iOS 15 nakamuva. Ngakho labo ababuyekeza njalo bangaphumula kalula okwamanje. "Akwamukelekile emphakathini okhululekile ukusebenzisa inhloli enamandla exhaswe nguhulumeni ngokumelene nalabo abazama ukwenza umhlaba ube indawo engcono," kusho u-Ivan Krstić, inhloko yomnyango wakwa-Apple's Security Engineering and Architecture ekukhululweni isitatimende sephephandaba esho lonke icala.
Kungaba njalo okuthakaselayo
Izinyathelo ezifanele
Ukuze kuqhutshekwe nokuqinisa imizamo yokulwa ne-spyware, i-Apple inikela ngezigidi ezingu-10 zamaRandi, kanye nesixazululo esingase sibe khona ecaleni, ezinhlanganweni ezihililekile ocwaningweni nasekuvikelweni kwe-cyber. Futhi ihlose ukusekela abacwaningi abaphezulu ngosizo lwamahhala lobuchwepheshe, ubuhlakani kanye nobunjiniyela ukuze basize emisebenzini yabo yocwaningo oluzimele, futhi izonikeza noma yiluphi usizo kwezinye izinhlangano ezenza umsebenzi kule ndawo uma kudingeka.
I-Apple iphinde yazisa bonke labo basebenzisi ebatholile ukuthi kungenzeka babeyizisulu zokuhlaselwa. Bese, noma nini lapho ithola umsebenzi ohambisana nokuhlasela kwe-spyware ngokuzayo, izokwazisa abasebenzisi abathintekayo ngokuvumelana nezinqubo ezihamba phambili. Iyakwenza futhi izoqhubeka ikwenza lokho hhayi nge-imeyili kuphela, kodwa nange-iMessage uma umsebenzisi enenombolo yocingo ehlotshaniswa ne-Apple ID yakhe.
