جاسوسی هکرها از دستگاههای اندروید با استفاده از اشکالِ جدیدِ تراشهی Qualcomm
?????? ????? ?????? ?????????? ?????? ????? ?? ?? ???????? mobile station ???? Qualcomm (MSM) ??? ???????? ?? ?????? ?????? ???????? ?? ?? ????? ????? ??? ?? ?????????? ??????? ???? ??????? ??? ?? ?? ???? ?? ?? ???????? ????? ???? ????? ??????? ???? ?????? ???.
?????? ???? ?????? Check Point ?? ?????? ?? ?? ????? ? ?? ???? ????? ??? ???? ?????????? ????? [?]: “?? ???? ??????? ?? ??? ??????????? ?? ????? ????? ???? ?????? ?? ?? ?????????? ??????? ??? ???????? ?? ?????? ????? ???? ????? ?? ???? ? ?????? ?? ??????? ??????? ??? ? ?? ????? ????? ?????? ?? ????????? ???????? ???? ? ??????? ????? ?? ??????.”
?????????? ????? ????? ??? ????? CVE-2020-11292 ????????? ??? ??? ? ?? API ????? ???? QMI ???? ???? ?? ???? ???? ?? ???? ?????????? ??? ???? ???? ???? ? ???????? ???? ?? ???????? ???? ???? ??????????? ???? ???? ?? ?????????? ??? ?? ?? ??? ?????????? ????? ?? ??????? ???? ???? ???? ???????? ???? ?????? ?? ?? ????? ?????????? ?????? ????? ?????? ?????? ???.
????????? Qualcomm MSM ?? ?? ????? ???? ????? ???????[?]? ?? ???????? ????? ????? ????? ?? ???????? ???? ????? ?? ???????. ??? ?????? ?? ?????????? ??????? ????? ?????? ?? ?? ???? ????Qualcomm MSM (QMI)? ?? ?? ?????? ??????? ????? ??????? ?????? ??? ????? ????????? ?? MSM ? ???? ????????????? ????? ????? ????????? ? ????? ???????? ?? ?? ?????????? ????? ?????? ????.
????????? ?? ???? ?? ?? ???????? ?????? ?????? ?????? ???????? ????? ???????? ?????? ??????? ? ??? ????? ?? ????? Qualcomm MSM ??????? ???????? ?? ???? ??????? ????????? ?? Counterpoint? ????? ??? ?????? ?? ???? ????????? ????? QMI ?????[?].
?????? ?????????? ?????: “?? ????? ???????? ?? ??????? ?? ??? ?????????? ?? ????? ?? ?? ??????? ?? ???? ????? ??? ? ?? ????? ????? ?????? ?? ??????? ???? ? ????? ????? ? ?????? ????? ??? ???? ?? ??????? ????? ?????? ?? ????. ?? ??? ?????? ???????? ?? ??? ?????????? ???? ??? ???? ??? ???????? ?????? ??????????? ??? ? ??????? ??????????? ?????????? ??? ?? ?? ??? ????.”
Check Point ?????????? ??? ?? ??? ????? ?? ?? ? ????? ??? ???? ?? Qualcomm ????? ???? ??? ? ?? ????? ??? ???????????? Qualcomm ????????? ?????? ?????? ?? ???? ???? ???.
??? ???? ?? ???? ????? ?? The Hacker News ???: “????? ??????????? ?? ?? ????? ? ???? ????? ??? ???????? ???????? ?? ?????? Qualcomm ???. Qualcomm Technologies ????? ?? ?????? ??? ???? ???????? ?? ?? ?????? OEM ?? ???? ???? ??? ? ?? ?? ??????? ????? ????? ??????? ?? ?? ?? ????? ???? ???????? ?????????? ??? ?? ?????? ????.” ??? ???? ?????? ??? ?? ??? ???? ??????? ????? ?? CVE-2020-11292 ?? ?? Android bulletin ?? ?????? ???? ???? ???.
??? ????? ??? ???? ?? ?? ??? ????? ?? ?????????Qualcomm ?????? ??????. ?? ??? ??? ????? ?????? Check Point ??? ?? ??? ???? ?????? ?? ?????? ???? “Achilles” ?????? ??????[?]? ?? ??????? ?????? ?????? ??????? ??? ??? ????? ? ??? ???? ?? ?? ?? ???? ?????? ???? ?? ?? “?? ????? ?????? ???? ???? ???? ?? ????? ?????” ????? ???.
Yaniv Balmas? ???? ??????? ?????? Check Point ???: “????????? ???? Cellular ?????? ??? ?????? ??????? ?????? ??????? ????????? ???????? ???? Qualcomm ????? ???????. ???? ?? ????????? ???? Qualcomm ???????? ????? ???? ?? ???? ?????? ???? ????? ?? ????? ???? ????.”
??????? ?? ?????? ????????? ?????? ??? ??????????? ?? ??????? ?????? ??? ?????? ?????? ?? ???????? ?????????? ??? ?? ?????? ????.
??? ???? ???[?]: “?????????? ???????? ??????? ?? ????? Qualcomm ??? ????? ?????????? ??? ??? ???? Check Point ???? ???????? ? ??????? ?? ?????? ???? ????????? ?? ???? ?????????? ????? ??????? ????? ???? ???. ????????? ?????? ?? ?????????? ??????? ??? ?? ?????? ???? ???? ???????? ???? ?????????? ??????? ?? Android Security Patch Level ?? ??? ??? ?? ???? ?? ?????? ?? ????? ??? ?????????? ??? ??? ?????? ???????.”
?????
[?] https://research.checkpoint.com/2021/security-probe-of-qualcomm-msm/
[?] https://en.wikichip.org/wiki/qualcomm/msm
[?] https://www.counterpointresearch.com/mediatek-biggest-smartphone-chipset-vendor-q3-2020/
[?] https://blog.checkpoint.com/2020/08/06/achilles-small-chip-big-peril/
[?] https://security.samsungmobile.com/securityPost.smsb
[?] https://thehackernews.com/2021/05/new-qualcomm-chip-bug-could-let-hackers.html
??????? :
???? ??????
