{"id":184825,"date":"2024-04-20T22:27:00","date_gmt":"2024-04-20T19:27:00","guid":{"rendered":"https:\/\/life.karpat.in.ua\/?p=184825"},"modified":"2024-04-20T09:26:48","modified_gmt":"2024-04-20T06:26:48","slug":"az-iphone-sem-feltorhetetlen-ez-a-kemprogram-minden-adatat-ellophatja","status":"publish","type":"post","link":"https:\/\/life.karpat.in.ua\/?p=184825&lang=hu","title":{"rendered":"Az iPhone sem felt\u00f6rhetetlen: ez a k\u00e9mprogram minden adat\u00e1t ellophatja"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Vesz\u00e9lyes k\u00e9mprogramra h\u00edvj\u00e1k fel a figyelmet biztons\u00e1gi kutat\u00f3k. A LightSpy gyakorlatilag korl\u00e1tlan ir\u00e1ny\u00edt\u00e1st szerezhet az iPhone-ok felett, \u00e9s \u00e9rz\u00e9keny adatokat, jelszavakat lophat \u2013 de a kamer\u00e1t \u00e9s a mikrofont is figyelheti.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A k\u00f6zhiedelemmel ellent\u00e9tben az iPhone-ok sem teljesen v\u00e9dettek a k\u00fcl\u00f6nb\u00f6z\u0151 t\u00e1mad\u00e1si form\u00e1kkal szemben, most p\u00e9ld\u00e1ul egy k\u00e9mprogram c\u00e9lozta meg az Apple k\u00e9sz\u00fcl\u00e9keit. Ez n\u00e9vjegyeket \u00e9s \u00fczeneteket tud lopni, valamint n\u00e9pszer\u0171 alkalmaz\u00e1sokb\u00f3l is ki tud nyerni adatokat.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"370\" src=\"https:\/\/life.karpat.in.ua\/wp-content\/uploads\/2024\/04\/60199ae0-0712-4284-9cae-8bfbe1545737.jpg\" alt=\"\" class=\"wp-image-184826\" srcset=\"https:\/\/life.karpat.in.ua\/wp-content\/uploads\/2024\/04\/60199ae0-0712-4284-9cae-8bfbe1545737.jpg 800w, https:\/\/life.karpat.in.ua\/wp-content\/uploads\/2024\/04\/60199ae0-0712-4284-9cae-8bfbe1545737-300x139.jpg 300w, https:\/\/life.karpat.in.ua\/wp-content\/uploads\/2024\/04\/60199ae0-0712-4284-9cae-8bfbe1545737-768x355.jpg 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">A besz\u00e9des nev\u0171 LightSpy k\u00e9mprogramr\u00f3l a The Hacker News k\u00f6z\u00f6lt r\u00e9szleteket \u2013 a k\u00e1rtev\u0151 jelenleg D\u00e9lkelet-\u00c1zsi\u00e1ban \u00e9s Indi\u00e1ban gy\u0171jti az \u00e1ldozatait, azonban pillanatok alatt lehetne nyugati orsz\u00e1gokban l\u00e9v\u0151 c\u00e9lpontok ellen ford\u00edtani.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A LightSpy-ra el\u0151sz\u00f6r 2020-ban bukkantak a Trend Micro \u00e9s a Kaspersky szakemberei. Ez egy olyan k\u00e9mprogram, amit egy, az iOS-ben l\u00e9v\u0151 \u201eh\u00e1ts\u00f3 ajt\u00f3t\u201d (backdoor) kihaszn\u00e1lva, kompromitt\u00e1lt h\u00edroldalakon kereszt\u00fcl terjesztenek.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2023-ban a ThreatFabric kutat\u00f3i fedezt\u00e9k fel, hogy a k\u00e9mprogram t\u00f6bb dologban \u2013 infrastrukt\u00far\u00e1ban \u00e9s funkci\u00f3kban \u2013 is osztozik a DragonEgg nev\u0171, androidos t\u00e1rs\u00e1val, amit az APT41 fejlesztett. Ez egy k\u00ednai, \u00e1llamilag t\u00e1mogatott hackercsoport.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Az nem pontosan ismert, hogy a leg\u00fajabb kamp\u00e1nyban hogyan terjesztik a LightSpy-t, de kor\u00e1bban a hackerek \u00e1ltal felt\u00f6rt h\u00edroldalakat haszn\u00e1ltak. A fert\u0151z\u00e9s els\u0151 l\u00e9p\u00e9se, hogy egy csomagban let\u00f6lt\u0151dnek a k\u00e9mprogram f\u0151bb komponensei \u2013 ezut\u00e1n t\u00f6bb tov\u00e1bbi b\u0151v\u00edtm\u00e9ny is let\u00f6lt\u0151dik egy szerverr\u0151l, melyekkel m\u00e1r k\u00fcl\u00f6nf\u00e9le \u00e9rz\u00e9keny adatokat is lopni tud.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A kezdeti id\u0151kben az iPhone-felhaszn\u00e1l\u00f3k kontaktjaira, \u00fczeneteire, pontos f\u00f6ldrajzi poz\u00edci\u00f3j\u00e1ra \u00e9s az internetes h\u00edv\u00e1sokra utazott a k\u00e1rtev\u0151, a Blackberry viszont felfedezett egy tov\u00e1bbfejlesztett v\u00e1ltozatot.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ez m\u00e1r f\u00e1jlokat is tud lopni az iPhone-r\u00f3l, valamint egy sor n\u00e9pszer\u0171 alkalmaz\u00e1sb\u00f3l, de az iCloud kulcskarik\u00e1b\u00f3l is ellophatja a jelszavakat, valamint a Safari \u00e9s a Chrome b\u00f6ng\u00e9sz\u00e9si adatait is megkaparinthatja.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tov\u00e1bb ny\u00fajtva a k\u00e9pess\u00e9gek eddig is tetemes list\u00e1j\u00e1t, a Blackberry szerint a kamer\u00e1val \u00e9s a mikrofonnal is k\u00e9sz\u00edthet felv\u00e9teleket a LightSpy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00e9gezet\u00fcl: shell-parancsokat is futtathatnak a t\u00e1mad\u00f3k a felt\u00f6rt iPhone-on, amivel ak\u00e1r teljesen \u00e1t is vehetik az ir\u00e1ny\u00edt\u00e1st a k\u00e9sz\u00fcl\u00e9k felett.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A j\u00f3 h\u00edr: dr\u00e1ga<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ugyan a fentiek alapj\u00e1n komoly vesz\u00e9lynek t\u0171nhet a LightSpy, a j\u00f3 h\u00edr, hogy az ilyen t\u00e1mad\u00e1sok dr\u00e1g\u00e1k \u00e9s bonyolultak \u2013 \u00edgy els\u0151sorban politikusok, v\u00e1llalati vezet\u0151k \u00e9s egy\u00e9b magasrang\u00fa szem\u00e9lyek ellen szokt\u00e1k bevetni \u0151ket.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ha valaki szeretn\u00e9 v\u00e9deni mag\u00e1t az ilyen t\u00e1mad\u00e1sokkal szemben, haszn\u00e1lhatja a <a href=\"https:\/\/support.apple.com\/HT212650\" target=\"_blank\" rel=\"noreferrer noopener\">Z\u00e1rt m\u00f3dot<\/a>, valamint a v\u00e9gpontok k\u00f6z\u00f6tt titkos\u00edtott \u00fczenetk\u00fcld\u0151 alkalmaz\u00e1sokat. Szint\u00e9n fontos az er\u0151s jelszavak, valamint a k\u00e9tl\u00e9pcs\u0151s azonos\u00edt\u00e1s haszn\u00e1lata.<\/p>\n\n\n\n<p class=\"has-text-align-right wp-block-paragraph\"><strong><a href=\"https:\/\/hvg.hu\/tudomany\/20240419_apple-iphone-lightspy-spyware-kemprogram-adatok-ellopasa-iranyitas-atvetele-veszely#rss\" target=\"_blank\" rel=\"noreferrer noopener\">(hvg.hu)<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Vesz\u00e9lyes k\u00e9mprogramra h\u00edvj\u00e1k fel a figyelmet biztons\u00e1gi kutat\u00f3k. A LightSpy gyakorlatilag korl\u00e1tlan ir\u00e1ny\u00edt\u00e1st szerezhet az iPhone-ok felett, \u00e9s \u00e9rz\u00e9keny adatokat, jelszavakat lophat \u2013 de a kamer\u00e1t \u00e9s a mikrofont is figyelheti.<\/p>\n","protected":false},"author":12,"featured_media":184826,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41,590,39],"tags":[3924,24957],"class_list":["post-184825","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cikkek","category-it-hu","category-vilag","tag-iphone","tag-kemprogram"],"_links":{"self":[{"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/184825","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=184825"}],"version-history":[{"count":1,"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/184825\/revisions"}],"predecessor-version":[{"id":184827,"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/posts\/184825\/revisions\/184827"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=\/wp\/v2\/media\/184826"}],"wp:attachment":[{"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=184825"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=184825"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/life.karpat.in.ua\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=184825"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}