علوم وتكنولوجيا

ثغرة بتطبيق SHAREit تشكّل خطرا كبيرا على بيانات المستخدمين الحساسة

صورة بوابة الشباب نيوز بوابة الشباب نيوزآخر تحديث: 21 نوفمبر، 2022
3٬015 69٬102
حذر خبراء مالكي الهواتف الذكية التي تعمل بنظام أندرويد بشأن تطبيق مشهور في متجر “جوجل بلاي”، تم تنزيله أكثر من مليار مرة، من أنه قد يشكّل خطرا كبيرا على الهاتف، وإذا كنت تمتلك هاتفا ذكيا أو جهازا لوحيا يعمل بنظام أندرويد، فأنت بحاجة إلى الحذر من التطبيق المعروف باسم SHAREit، والذي تم تنزيله مليار مرة وتلقى الملايين من التقييمات الإيجابية، كونه يحتوي على نقاط ضعف “متعددة”
ووفقا لما ذكره موقع “RT”، اكتشف خبراء الأمن من Trend Micro هذه المشكلات، والتي يمكن الاستفادة منها من قبل الجهات السيئة للوصول إلى البيانات الحساسة.
ويمكن للقراصنة استخدام هذه الثغرات الأمنية لتنفيذ تعليمات برمجية عشوائية ولإمكانية شن هجمات تنفيذ التعليمات البرمجية عن بُعد.
ويمكن أن تسمح هذه الثغرات أيضا للقراصنة بتشغيل هجمات Man-in-the-disk (MITD)، والتي يمكن استخدامها لتعطيل جهاز أندرويد الخاص بالضحية.
ونشرت Trend Micro نتائجها يوم الاثنين الماضي، وفي ذلك الوقت قالت إن نقاط الضعف في SHAREit لم يتم إصلاحها. ووفقا لخبراء الأمن، فقد أبلغوا صانعي SHAREit بالنتائج التي توصلوا إليها قبل ثلاثة أشهر، ومع ذلك، ما تزال المشكلات في تطبيق أندرويد الشهير قائمة، وأبلغت Trend Micro أيضا شركة غوغل عن ثغرات SHAREit.
وقالت شركة Trend Micro، في توضيحها لنتائجها عبر الإنترنت: “اكتشفنا العديد من الثغرات الأمنية في التطبيق المسمى SHAREit. ويمكن إساءة استخدام الثغرات لتسريب بيانات المستخدم الحساسة وتنفيذ تعليمات برمجية عشوائية بأذونات SHAREit باستخدام رمز أو تطبيق ضار.
ويمكن أيضا أن يؤدي إلى تنفيذ التعليمات البرمجية عن بعد (RCE)”.
وتابعت الشركة: “في الماضي، كانت الثغرات الأمنية التي يمكن استخدامها لتنزيل وسرقة الملفات من أجهزة المستخدمين مرتبطة أيضا بالتطبيق. وبينما يسمح التطبيق بنقل وتنزيل أنواع مختلفة من الملفات، مثل حزمة أندرويد APK، فإن الثغرات الأمنية المرتبطة بهذه الميزات هي على الأرجح عيوب غير مقصودة”.
وأضاف الخبراء: “يحتوي SHAREit على أكثر من مليار عملية تنزيل في غوغل بلاي وقد تم تسميته كأحد أكثر التطبيقات تنزيلا في عام 2019. ووقع إبلاغ غوغل بهذه الثغرات الأمنية”.
ووفقا لمتجر “جوجل بلاي”، كانت آخر مرة تم فيها تحديث SHAREit في 9 فبراير، والتي سبقت نشر بحث Trend Micro. ويبلغ إجمالي عدد مستخدمي تطبيق مشاركة الملفات، الذي يتيح للمستخدمين تبادل الصور والموسيقى ومقاطع الفيديو وصورGIF ، 1.8 مليار مستخدم حول العالم. وفي الواقع، وفقا لـ App Annie، كان SHAREit واحدا من أفضل 10 تطبيقات تم تنزيلها في العالم في عام 2019.
وعلى متجر “جوجل بلاي”، يتميز بمتوسط تقييم 4.1 بناء على 15.5 مليون تعليق. وأضافت Trend Micro: “لقد أبلغنا البائع الذي لم يرد بعد عن هذه الثغرات الأمنية. قررنا الكشف عن بحثنا بعد ثلاثة أشهر من الإبلاغ عن ذلك كون العديد من المستخدمين قد يتأثرون بهذا الهجوم لأن المهاجم يمكنه سرقة بيانات حساسة وفعل أي شيء بإذن من التطبيقات. ولا يمكن اكتشافه بسهولة”.

 

عدد المشاهدات: 42٬627
صورة بوابة الشباب نيوز بوابة الشباب نيوزآخر تحديث: 21 نوفمبر، 2022
3٬015 69٬102
صورة بوابة الشباب نيوز

بوابة الشباب نيوز

جاء إطلاق بوابة الشباب نيوز على الانترنت ليكون وسيلة لمعرفة الاخبار اول باول، ويمثل إضافة قوية في الفضاء الالكتروني، وجاءت انطلاقة الموقع من مصر من قلب الاحداث ليهتم بالثورات العربية والمشاكل السياسية ويغطى الفعاليات الاقتصادية والرياضية ويواكب علوم التكنولوجيا ويغطي اخبار المرآة

مقالات ذات صلة

«فيسبوك» يعلن الدولة الأعلى فى استخدامه

انفجار “آيفون 6 إس بلس” وسقوط جرحى

سناب شات تطرح مميزات جديدة للتراسل المصور

مايكروسوفت تحذر من ثغرة خطيرة في “ويندوز”

‫3٬015 تعليقات

  42. I do not even know how I ended up here, but I thought this post
    was great. I don’t know who you are but certainly you are going
    to a famous blogger if you aren’t already 😉 Cheers!

  62. Thanks for ones marvelous posting! I actually enjoyed
    reading it, you might be a great author. I will be sure to bookmark your
    blog and will often come back someday. I want to encourage you to continue your great writing, have a nice afternoon!

  77. I’d like to thank you for the efforts you’ve put in writing this blog.
    I’m hoping to check out the same high-grade blog posts from you later on as well.

    In fact, your creative writing abilities has inspired me to get my own site now 😉

  80. Howdy, i read your blog occasionally and i own a similar one and i was just curious if
    you get a lot of spam comments? If so how do you stop it, any plugin or anything you can recommend?

    I get so much lately it’s driving me mad so any help is
    very much appreciated.

  86. Great beat ! I wish to apprentice while you amend your site, how could i subscribe for
    a blog web site? The account aided me a acceptable deal.
    I had been a little bit acquainted of this your
    broadcast offered bright clear idea

  121. Oh my goodness! Awesome article dude! Many thanks, However I am experiencing problems with your RSS.
    I don’t know why I cannot join it. Is there anybody having identical RSS problems?

    Anyone who knows the solution can you kindly respond?
    Thanx!!

  139. hey there and thank you for your info – I have definitely
    picked up anything new from right here. I did however expertise a few technical points using this site, as I experienced to
    reload the web site many times previous to I could get it to
    load properly. I had been wondering if your hosting is OK?
    Not that I’m complaining, but sluggish loading instances times will
    very frequently affect your placement in google and can damage
    your high-quality score if advertising and marketing with Adwords.

    Anyway I am adding this RSS to my e-mail and can look out for a lot more of your respective interesting content.
    Ensure that you update this again soon.

  291. hi!,I like your writing very a lot! percentage we keep up a correspondence more about
    your post on AOL? I need an expert in this house to resolve my problem.
    May be that’s you! Having a look ahead to see you.

  298. I’m not sure why but this site is loading incredibly slow for me.
    Is anyone else having this problem or is it a issue on my
    end? I’ll check back later and see if the problem still exists.

  309. You’re so interesting! I do not think I’ve truly read something like this before.
    So nice to discover somebody with original thoughts on this
    topic. Seriously.. thanks for starting this up. This site is one thing that’s needed on the internet, someone with a little originality!

  313. Wow that was strange. I just wrote an incredibly long comment but
    after I clicked submit my comment didn’t appear.

    Grrrr… well I’m not writing all that over again. Anyway, just wanted to say wonderful blog!

  341. It’s in point of fact a nice and useful piece of
    info. I’m happy that you just shared this helpful info with us.
    Please stay us up to date like this. Thank you for sharing.

  346. This design is steller! You most certainly know how to keep a reader entertained.

    Between your wit and your videos, I was almost moved to start my own blog (well, almost…HaHa!) Wonderful job.
    I really enjoyed what you had to say, and more than that, how
    you presented it. Too cool!

  354. I blog often and I really thank you for your information. The article has truly peaked
    my interest. I am going to book mark your site and keep checking for new information about once per week.
    I opted in for your Feed as well.

  362. Hi, i read your blog from time to time and i own a similar one and i
    was just curious if you get a lot of spam comments? If so how
    do you protect against it, any plugin or anything
    you can suggest? I get so much lately it’s driving me insane so any
    support is very much appreciated.

  367. Attractive component to content. I just stumbled upon your
    website and in accession capital to say that I acquire
    actually loved account your weblog posts. Anyway I’ll be subscribing on your feeds or even I achievement you get admission to consistently
    fast.

  369. Hey this is somewhat of off topic but I was wondering if blogs use WYSIWYG editors or
    if you have to manually code with HTML. I’m starting a blog soon but have no coding skills so I wanted to get advice from someone with experience.
    Any help would be greatly appreciated!

  374. I think that everything published was very logical.

    However, what about this? what if you wrote a catchier post title?
    I am not suggesting your content isn’t solid, but what if you added
    a title that grabbed folk’s attention? I mean ثغرة بتطبيق
    SHAREit تشكّل خطرا كبيرا على بيانات المستخدمين
    الحساسة – بوابة الشباب
    نيوز is kinda plain. You ought to glance at Yahoo’s home page and
    watch how they create news titles to get people to click.
    You might add a related video or a picture or two to grab people
    interested about what you’ve written. Just my opinion, it might bring your blog a little livelier.

  375. Hmm is anyone else experiencing problems
    with the pictures on this blog loading? I’m trying to figure out if its a problem on my end or if it’s the blog.

    Any suggestions would be greatly appreciated.

  380. I’ll immediately grasp your rss feed as I can’t
    in finding your email subscription link or newsletter service.
    Do you’ve any? Kindly permit me recognise in order that I may subscribe.
    Thanks.

  387. It’s a shame you don’t have a donate button! I’d most certainly donate to this
    fantastic blog! I guess for now i’ll settle for book-marking and adding your RSS feed to my Google account.
    I look forward to brand new updates and will share this website with my Facebook group.
    Talk soon!

  388. Awesome blog! Is your theme custom made or did you download
    it from somewhere? A design like yours with a few simple adjustements would really make my
    blog shine. Please let me know where you got your design. With thanks

  397. Pretty part of content. I simply stumbled upon your website and in accession capital to claim
    that I acquire in fact enjoyed account your weblog
    posts. Anyway I will be subscribing to your feeds
    and even I success you get entry to constantly fast.

  399. After looking at a number of the blog articles on your site, I really appreciate your technique of writing a blog.
    I saved it to my bookmark webpage list and will be checking back soon. Please visit
    my web site as well and tell me how you feel.

  405. Pretty section of content. I just stumbled upon your weblog and in accession capital to assert that
    I acquire actually enjoyed account your blog posts.
    Anyway I will be subscribing to your augment and even I
    achievement you access consistently rapidly.

  411. Write more, thats all I have to say. Literally, it seems as though you relied on the video to make
    your point. You obviously know what youre talking about, why throw away your intelligence on just posting videos to your site
    when you could be giving us something enlightening to read?

  415. Hi there are using WordPress for your site platform? I’m new
    to the blog world but I’m trying to get started
    and set up my own. Do you require any html coding knowledge to make your own blog?

    Any help would be greatly appreciated!

  475. I have been surfing online more than three hours these days, yet I never found any fascinating article like yours. It’s pretty worth enough for me. In my opinion, if all website owners and bloggers made just right content as you did, the internet shall be much more useful than ever before.

  476. I’ve been exploring for a little bit for any high-quality articles or blog posts in this kind of space . Exploring in Yahoo I finally stumbled upon this site. Reading this info So i’m glad to exhibit that I have a very just right uncanny feeling I came upon exactly what I needed. I so much no doubt will make certain to don?t put out of your mind this web site and give it a look on a constant basis.

  483. Thank you, I have recently been searching for information approximately this topic for ages and yours is the best I have found out so far. However, what about the conclusion? Are you sure concerning the source?

  493. What’s Happening i’m new to this, I stumbled upon this I have found It positively helpful and it has helped me out loads. I am hoping to give a contribution & aid other users like its helped me. Good job.

  514. Good day! This is my 1st comment here so I just wanted to give a quick shout out and tell you I truly enjoy reading through your blog posts. Can you suggest any other blogs/websites/forums that go over the same subjects? Many thanks!

  519. Having read this I thought it was really informative. I appreciate you finding the time and effort to put this article together. I once again find myself spending a significant amount of time both reading and leaving comments. But so what, it was still worth it!