{"id":8325,"date":"2022-04-12T14:20:34","date_gmt":"2022-04-12T14:20:34","guid":{"rendered":"https:\/\/www.sdh.hu\/?p=8325"},"modified":"2022-04-12T14:20:34","modified_gmt":"2022-04-12T14:20:34","slug":"letoltotte-valamelyiket-penzlopo-alkalmazasokat-talaltak-a-play-aruhazban","status":"publish","type":"post","link":"https:\/\/www.sdh.hu\/en\/letoltotte-valamelyiket-penzlopo-alkalmazasokat-talaltak-a-play-aruhazban\/","title":{"rendered":"Let\u00f6lt\u00f6tte valamelyiket? P\u00e9nzlop\u00f3 alkalmaz\u00e1sokat tal\u00e1ltak a Play \u00e1ruh\u00e1zban"},"content":{"rendered":"<div class=\"article-lead entry-summary\" data-scroll-event-name=\"ScrollToArticleLead\" data-scroll-event-handled=\"true\">\n<p>T\u00f6bb olyan alkalmaz\u00e1s is beker\u00fclt a Play \u00e1ruh\u00e1z k\u00edn\u00e1lat\u00e1ba, amivel a felhaszn\u00e1l\u00f3k banki adatait \u00e9s p\u00e9nz\u00e9t is el lehetett lopni.<\/p>\n<\/div>\n<div class=\"article-content entry-content\">\n<p>T\u00f6bb mint 50 ezer alkalommal telep\u00edtett\u00e9k a Google Play \u00e1ruh\u00e1z\u00e1b\u00f3l azokat a v\u00edrusos alkalmaz\u00e1sokat, amelyekkel bankokat \u00e9s m\u00e1s p\u00e9nz\u00fcgyi int\u00e9zm\u00e9nyek \u00fcgyfeleit vett\u00e9k c\u00e9lba a kiberb\u0171n\u00f6z\u0151k. Az Octo n\u00e9vre keresztelt malware a holland kiberbiztons\u00e1gi c\u00e9g, a ThreatFabric szerint egy m\u00e1sik, kor\u00e1bbr\u00f3l m\u00e1r ismert k\u00e1rtev\u0151, az ExobotCompact \u00faj v\u00e1ltozata.<\/p>\n<p>I understand the rules for <em><a href=\"https:\/\/thehackernews.com\/2022\/04\/new-octo-banking-trojan-spreading-via.html\" target=\"_blank\" rel=\"noopener\">The Hacker News<\/a><\/em> besz\u00e1mol\u00f3ja szerint t\u00f6rt\u00e9nt m\u00e1r hasonl\u00f3 eset: m\u00e9g 2021 nyar\u00e1n az Exobot egy m\u00e1sik v\u00edrus, a Coper terjed\u00e9s\u00e9t seg\u00edtette el\u0151. Az a kolumbiai felhaszn\u00e1l\u00f3kat c\u00e9lozta meg, ez\u00fattal azonban Eur\u00f3p\u00e1ra f\u00f3kusz\u00e1lt a t\u00e1mad\u00e1s.<\/p>\n<p>A szakemberek szerint a rosszindulat\u00fa alkalmaz\u00e1sok els\u0151dleges szerepe, hogy telep\u00edts\u00e9k a k\u00e1rt\u00e9kony k\u00f3dot a mobilra. Az Octo az al\u00e1bbi alkalmaz\u00e1sokban jelent meg:<\/p>\n<ul>\n<li>Pocket Screencaster<\/li>\n<li>Fast Cleaner 2021<\/li>\n<li>Play Store<\/li>\n<li>Postbank Security<\/li>\n<li>Pocket Screencaster<\/li>\n<li>BAWAG PSK Security<\/li>\n<li>Play Store app install.<\/li>\n<\/ul>\n<p>A fenti alkalmaz\u00e1sok a Play \u00e1ruh\u00e1z telep\u00edt\u0151j\u00e9nek, k\u00e9perny\u0151r\u00f6gz\u00edt\u00e9sre alkalmas appnak \u00e9s p\u00e9nz\u00fcgyi alkalmaz\u00e1snak \u00e1lc\u00e1zt\u00e1k magukat.<\/p>\n<p>Az Octo arra is k\u00e9pes, hogy \u00e1tvegye az ir\u00e1ny\u00edt\u00e1st a felhaszn\u00e1l\u00f3 mobilja felett, illetve r\u00f6gz\u00edtse azt, hogy mi t\u00f6rt\u00e9nik a kijelz\u0151n, valamint milyen karaktereket g\u00e9pel be az illet\u0151 egy-egy mez\u0151be. A ThreatFabric szakemberei szerint a c\u00e9l az, hogy a felhaszn\u00e1l\u00f3 lehet\u0151v\u00e9 tegye, hogy a v\u00edrus automatikusan, m\u00e1r a felhaszn\u00e1l\u00f3 beavatkoz\u00e1sa n\u00e9lk\u00fcl is el tudjon ind\u00edtani tranzakci\u00f3kat.<\/p>\n<p>A fenti alkalmaz\u00e1sokat m\u00e1r elt\u00e1vol\u00edtott\u00e1k a Play \u00e1ruh\u00e1zb\u00f3l.<\/p>\n<\/div>\n<p>Forr\u00e1s: HVG<\/p>","protected":false},"excerpt":{"rendered":"<p>T\u00f6bb olyan alkalmaz\u00e1s is beker\u00fclt a Play \u00e1ruh\u00e1z k\u00edn\u00e1lat\u00e1ba, amivel a felhaszn\u00e1l\u00f3k banki adatait \u00e9s p\u00e9nz\u00e9t is el lehetett lopni. T\u00f6bb mint 50 ezer alkalommal telep\u00edtett\u00e9k a Google Play \u00e1ruh\u00e1z\u00e1b\u00f3l azokat a v\u00edrusos alkalmaz\u00e1sokat, amelyekkel bankokat \u00e9s m\u00e1s p\u00e9nz\u00fcgyi int\u00e9zm\u00e9nyek \u00fcgyfeleit vett\u00e9k c\u00e9lba a kiberb\u0171n\u00f6z\u0151k. Az Octo n\u00e9vre keresztelt malware a holland kiberbiztons\u00e1gi c\u00e9g, a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":8326,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[342],"tags":[343],"class_list":["post-8325","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-android","tag-play-aruhaz"],"featured_image_src":{"landsacpe":["https:\/\/www.sdh.hu\/wp-content\/uploads\/2022\/04\/35ce7e61-f3bd-406b-8c3c-1d20269eea31-800x370.jpg",800,370,true],"list":["https:\/\/www.sdh.hu\/wp-content\/uploads\/2022\/04\/35ce7e61-f3bd-406b-8c3c-1d20269eea31-463x348.jpg",463,348,true],"medium":["https:\/\/www.sdh.hu\/wp-content\/uploads\/2022\/04\/35ce7e61-f3bd-406b-8c3c-1d20269eea31-300x139.jpg",300,139,true],"full":["https:\/\/www.sdh.hu\/wp-content\/uploads\/2022\/04\/35ce7e61-f3bd-406b-8c3c-1d20269eea31.jpg",800,370,false]},"_links":{"self":[{"href":"https:\/\/www.sdh.hu\/en\/wp-json\/wp\/v2\/posts\/8325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sdh.hu\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sdh.hu\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sdh.hu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sdh.hu\/en\/wp-json\/wp\/v2\/comments?post=8325"}],"version-history":[{"count":0,"href":"https:\/\/www.sdh.hu\/en\/wp-json\/wp\/v2\/posts\/8325\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sdh.hu\/en\/wp-json\/wp\/v2\/media\/8326"}],"wp:attachment":[{"href":"https:\/\/www.sdh.hu\/en\/wp-json\/wp\/v2\/media?parent=8325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sdh.hu\/en\/wp-json\/wp\/v2\/categories?post=8325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sdh.hu\/en\/wp-json\/wp\/v2\/tags?post=8325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}