Uhlelo lokusebenza olubizwa ngokuthi i-2FA Authenticator muva nje luvele ku-Google Play Isitolo, luthembisa "ukuqinisekisa okuvikelekile kwamasevisi akho e-inthanethi," eziqhayisa ngezici ezithile okuthiwa azikho ezinhlelweni zokufakazela ubuqiniso ezikhona kakade, njengokubethela okufanele noma izipele. Inkinga yayiwukuthi yayine-trojan yasebhange eyingozi. Inkampani yezokuphepha kuCyber Pradeo ithole lokho.
Uhlelo lokusebenza luphinde lwazama ukukholisa abasebenzisi ukuthi lungangenisa izivumelwano zokuqinisekisa zezinye izinhlelo zokusebenza zokuqinisekisa izinto ezimbili, okuyi-Authy, i-Google Authenticator, i-Microsoft Authenticator, ne-Steam, futhi isingathe endaweni eyodwa. Iphinde yanikeza ukwesekwa kwe-HOTP (iphasiwedi esekelwe ku-hash yesikhathi esisodwa) kanye ne-TOTP (iphasiwedi esekelwe ngesikhathi esisodwa) ama-algorithms.
Kodwa-ke, empeleni, i-2FA Authenticator yayingahloselwe ukuvikela idatha yomsebenzisi, kodwa kunalokho ukuyintshontsha. Ngokusho kochwepheshe bePradeo, lolu hlelo lokusebenza lusebenza njengento ebizwa ngokuthi i-dropper ye-malware eklanyelwe ukweba idatha yezezimali. Iqukethe ikhodi yomthombo ovulekile yohlelo lokusebenza lwe-Aegis Authenticator olungenwe i-malware.
Ngemuva kokuthi uhlelo lokusebenza luthole izimvume ezidingekayo kumsebenzisi, lufaka uhlelo olungayilungele ikhompuyutha lwe-Vultur kudivayisi yomsebenzisi, engasebenzisa ukurekhodwa kwesikrini nokusebenzisana kwekhibhodi ukurekhoda ukuze kutholwe amaphasiwedi ebhange leselula kanye nemininingwane yokungena kumasevisi ezezimali (okuhlanganisa nezinkundla zokulondoloza imali ye-cryptocurrency).
Uhlelo lokusebenza seluvele lususiwe ku-Google Store. Kodwa-ke, ezinsukwini eziyi-15 ebitholakala lapho, yaqopha ukulanda okungaphezu kuka-10. Uma ungomunye walabo abanayo ocingweni lwakho, yisuse ngokushesha futhi ushintshe wonke amaphasiwedi abalulekile ukuze aphephe.
Ungaba nentshisekelo ku
