{"id":8105,"date":"2025-02-06T20:20:49","date_gmt":"2025-02-06T20:20:49","guid":{"rendered":"https:\/\/howtogeek.blog\/lt\/?p=8105"},"modified":"2025-02-06T20:20:49","modified_gmt":"2025-02-06T20:20:49","slug":"first-instances-of-malwareinfected-ios-apps-with-screen-reading-capabilities-discovered-in-app-store","status":"publish","type":"post","link":"https:\/\/howtogeek.blog\/lt\/first-instances-of-malwareinfected-ios-apps-with-screen-reading-capabilities-discovered-in-app-store\/","title":{"rendered":"Pirmieji kenk\u0117ji\u0161komis programomis u\u017ekr\u0117st\u0173 \u201eiOS\u201c program\u0173 su ekrano skaitymo galimyb\u0117mis atvejai aptikti \u201eApp Store\u201c"},"content":{"rendered":"<h2>Kylanti gr\u0117sm\u0117: kenk\u0117ji\u0161ka programa aptikta iOS programose i\u0161 Apple App Store ir Google Play Store<\/h2>\n<p>Dauguma \u201eiPhone\u201c naudotoj\u0173 pasitiki, kad j\u0173 \u012frenginiai, atsisi\u0173sdami programas, i\u0161laiko tvirt\u0105 apsaug\u0105 nuo kenk\u0117ji\u0161k\u0173 program\u0173. Istori\u0161kai tai palaik\u0117 grie\u017etas \u201eApple\u201c program\u0173 tikrinimo procesas. Ta\u010diau neseniai paskelbtoje \u201eKaspersky\u201c ataskaitoje atskleid\u017eiamas nerim\u0105 keliantis mobiliojo ry\u0161io saugumo prover\u017eis: \u201eApp Store\u201c pirm\u0105 kart\u0105 pasirod\u0117 \u201eiOS\u201c kenk\u0117ji\u0161k\u0173 program\u0173 atvejai, naudojant OCR technologij\u0105, skirt\u0105 i\u0161 vartotojo ekrano kopij\u0173 i\u0161skirti neskelbtin\u0105 informacij\u0105.<\/p>\n<h2>\u201eSparkCat\u201c kenk\u0117ji\u0161kos programos supratimas<\/h2>\n<p>\u201eKaspersky\u201c i\u0161vadose atskleista, kad \u0161i kenk\u0117ji\u0161ka programa, pavadinta \u201eSparkCat\u201c, buvo aktyvi nuo 2024 m.kovo m\u0117nesio ir buvo identifikuota keliose \u201eApple App Store\u201c ir \u201eGoogle Play\u201c parduotuv\u0117se.\u0160i sud\u0117tinga kenk\u0117ji\u0161ka programa naudoja OCR papildin\u012f, gaut\u0105 i\u0161 Google ML Kit bibliotekos, leid\u017eiant\u012f nuskaityti ir skaityti tekst\u0105, i\u0161traukt\u0105 i\u0161 \u012frenginio nuotrauk\u0173 galerijoje saugom\u0173 ekrano kopij\u0173.<\/p>\n<h2>Pagrindin\u0117 gr\u0117sm\u0117: kriptovaliutos pinigin\u0117s saugumas<\/h2>\n<p>Pagrindinis \u201eSparkCat\u201c kenk\u0117ji\u0161kos programos tikslas kelia nerim\u0105: ji ie\u0161ko kriptovaliut\u0173 pinigini\u0173, i\u0161saugot\u0173 kaip vaizdai, atk\u016brimo frazi\u0173. Nusta\u010dius \u0161ias atk\u016brimo frazes, jos gali b\u016bti perduotos u\u017epuolikui, kuris gali perimti kriptovaliutos kontrol\u0119, tod\u0117l gali b\u016bti pavogta vertinga kriptovaliuta. Vartotojams, \u012fpratusiems saugoti savo pinigines, reik\u0117t\u0173 atkreipti d\u0117mes\u012f \u012f tai, kad suman\u016bs asmenys atk\u016brimo arba pradin\u0117s fraz\u0117s paprastai mato tik vien\u0105 kart\u0105 kurdami pinigin\u0119, tod\u0117l labai rekomenduojama \u0161i\u0105 svarbi\u0105 informacij\u0105 saugoti saugioje neprisijungus vietoje, o ne kaip ekrano kopij\u0105.<\/p>\n<h3>Platesn\u0117s reik\u0161m\u0117s duomen\u0173 saugai<\/h3>\n<p>Nors pagrindinis d\u0117mesys skiriamas kriptovaliut\u0173 fraz\u0117ms, kenk\u0117ji\u0161k\u0173 program\u0173 paj\u0117gumai apima ne tik kriptovaliutas. Jis taip pat gali nuskaityti ir u\u017efiksuoti kitus neskelbtinus slapta\u017eod\u017eius, tod\u0117l kyla didesn\u0117 rizika vartotoj\u0173 duomen\u0173 saugumui \u012fvairiose platformose.<\/p>\n<h2>Paveiktos programos: \u012f k\u0105 atkreipti d\u0117mes\u012f<\/h2>\n<p>Tarp \u0161ios kenk\u0117ji\u0161kos programos pa\u017eeist\u0173 program\u0173 yra:<\/p>\n<ul>\n<li><strong>WeTink<\/strong> \u2013 dirbtinio intelekto valdoma pokalbi\u0173 programa<\/li>\n<li><strong>AnyGPT<\/strong> \u2013 dar viena AI pokalbi\u0173 paslauga<\/li>\n<li><strong>ComeCome<\/strong> \u2013 maisto pristatymo program\u0117l\u0117<\/li>\n<\/ul>\n<p>Nepaisant rimt\u0173 j\u0173 saugumo sprag\u0173 padarini\u0173, visas tris \u0161ias programas vis dar galima atsisi\u0173sti i\u0161 \u201eApp Store\u201c.<\/p>\n<h2>Kodo \u012fvedimo pob\u016bdis<\/h2>\n<p>\u201eKaspersky\u201c dar turi nustatyti, ar \u0161i kodo integracija buvo ty\u010din\u0117 k\u016br\u0117j\u0173 iniciatyva, ar nety\u010din\u0117 tiekimo grandin\u0117s atakos pasekm\u0117. Bet kuriuo atveju toks nesaugumas pabr\u0117\u017eia budrumo nuo kenk\u0117ji\u0161k\u0173 program\u0173 gr\u0117smi\u0173 svarb\u0105.<\/p>\n<h2>Prevencin\u0117s priemon\u0117s vartotojams<\/h2>\n<p>\u201eiPhone\u201c naudotojams itin svarbi apsauga nuo neteis\u0117to duomen\u0173 i\u0161gavimo yra apriboti program\u0173 prieig\u0105 prie j\u016bs\u0173 nuotrauk\u0173 bibliotekos. Nor\u0117dami padidinti saugum\u0105, atlikite \u0161iuos veiksmus:<\/p>\n<ul>\n<li>Eikite \u012f <code>Settings<\/code>.<\/li>\n<li>Pasirinkite <code>Privacy &amp; Security<\/code>.<\/li>\n<li>Bakstel\u0117kite <code>Photos<\/code>nor\u0117dami pamatyti, kurios programos turi prieig\u0105.<\/li>\n<li>Per\u017ei\u016br\u0117kite ir apribokite bet kurios programos, kuriai nereikia visi\u0161kos prieigos, prieigos leidimus.<\/li>\n<\/ul>\n<p>\u0160ie nedideli pakeitimai gali \u017eymiai sustiprinti j\u016bs\u0173 apsaug\u0105 nuo galim\u0173 gr\u0117smi\u0173.<\/p>\n<h2>B\u016bkite informuoti<\/h2>\n<p>Nor\u0117dami gauti daugiau technini\u0173 \u012f\u017evalg\u0173 apie kenk\u0117ji\u0161k\u0105 program\u0105 ir vis\u0105 paveikt\u0173 iOS sistem\u0173 s\u0105ra\u0161\u0105, per\u017ei\u016br\u0117kite i\u0161sami\u0105 <a href=\"https:\/\/securelist.com\/sparkcat-stealer-in-app-store-and-google-play\/115385\/.how\" rel=\"noopener noreferrer nofollow\">Kaspersky ataskait\u0105<\/a>.<\/p>\n<p>Jei norite gauti nuolatinius saugos naujinimus, \u012fskaitant program\u0173 pa\u0161alinim\u0105 ir veiksmingus nurodymus, neatsilikkite nuo patikim\u0173 technologij\u0173 naujien\u0173 \u0161altini\u0173 ir vadovaukit\u0117s saugos patarimais.<\/p>\n<h2>Da\u017enai u\u017eduodami klausimai<\/h2>\n<h3><strong>1. K\u0105 daryti, jei atsisiun\u010diau paveikt\u0105 program\u0105?<\/strong><\/h3>\n<p>Jei atsisiunt\u0117te vien\u0105 i\u0161 \u0161i\u0173 program\u0173, labai svarbu nedelsiant j\u0105 pa\u0161alinti. Taip pat patikrinkite savo kriptovaliut\u0173 pinigin\u0119 ir pakeiskite atk\u016brimo fraz\u0119, jei \u012ftariate, kad j\u016bs\u0173 informacija gal\u0117jo b\u016bti pa\u017eeista.<\/p>\n<h3><strong>2. Kaip su\u017einoti, ar program\u0105 saugu atsisi\u0173sti?<\/strong><\/h3>\n<p>Prie\u0161 atsisi\u0173sdami bet kuri\u0105 program\u0105, per\u017ei\u016br\u0117kite naudotoj\u0173 atsiliepimus, ie\u0161kokite patikim\u0173 \u012fvertinim\u0173 ir \u012fsitikinkite, kad j\u0105 pateik\u0117 patikimas leid\u0117jas. Visada patartina i\u0161tirti galimas saugumo problemas, susijusias su konkre\u010diomis programomis.<\/p>\n<h3><strong>3. Ar \u201eiOS\u201c saugesn\u0117 nei \u201eAndroid\u201c nuo kenk\u0117ji\u0161k\u0173 program\u0173?<\/strong><\/h3>\n<p>Nors \u201eiOS\u201c tradici\u0161kai laikoma saugesne d\u0117l kontroliuojamos aplinkos, toki\u0173 gr\u0117smi\u0173, kaip \u201eSparkCat\u201c kenk\u0117ji\u0161ka programa, atsiradimas rodo, kad jokia platforma n\u0117ra apsaugota nuo pa\u017eeid\u017eiamum\u0173. Budrumas ir aktyvios saugumo priemon\u0117s yra b\u016btinos visiems mobiliojo ry\u0161io vartotojams.<\/p>\n<p><a class=\"xiaomi\" href=\"https:\/\/allthings.how\/malware-infected-ios-apps-with-screen-reading-found-in-app-store-for-the-first-time\/\" rel=\"noopener noreferrer nofollow\" target=\"_blank\">\u0160altinis ir vaizdai<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kylanti gr\u0117sm\u0117: kenk\u0117ji\u0161ka programa aptikta iOS programose i\u0161 Apple App Store ir Google Play Store Dauguma \u201eiPhone\u201c naudotoj\u0173 pasitiki, kad j\u0173 \u012frenginiai, atsisi\u0173sdami programas, i\u0161laiko tvirt\u0105 apsaug\u0105 nuo kenk\u0117ji\u0161k\u0173 program\u0173. Istori\u0161kai tai palaik\u0117 grie\u017etas \u201eApple\u201c program\u0173 tikrinimo procesas. Ta\u010diau neseniai paskelbtoje \u201eKaspersky\u201c ataskaitoje atskleid\u017eiamas nerim\u0105 keliantis mobiliojo ry\u0161io saugumo prover\u017eis: \u201eApp Store\u201c pirm\u0105 kart\u0105 pasirod\u0117 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[6],"class_list":["post-8105","post","type-post","status-publish","format-standard","hentry","category-how-to","tag-iphone"],"acf":[],"_links":{"self":[{"href":"https:\/\/howtogeek.blog\/lt\/wp-json\/wp\/v2\/posts\/8105","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/howtogeek.blog\/lt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/howtogeek.blog\/lt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/howtogeek.blog\/lt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/howtogeek.blog\/lt\/wp-json\/wp\/v2\/comments?post=8105"}],"version-history":[{"count":1,"href":"https:\/\/howtogeek.blog\/lt\/wp-json\/wp\/v2\/posts\/8105\/revisions"}],"predecessor-version":[{"id":8106,"href":"https:\/\/howtogeek.blog\/lt\/wp-json\/wp\/v2\/posts\/8105\/revisions\/8106"}],"wp:attachment":[{"href":"https:\/\/howtogeek.blog\/lt\/wp-json\/wp\/v2\/media?parent=8105"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/howtogeek.blog\/lt\/wp-json\/wp\/v2\/categories?post=8105"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/howtogeek.blog\/lt\/wp-json\/wp\/v2\/tags?post=8105"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}