Qufulka Habka Qufulka, AirDrop, iyo Bluetooth Against Spyware¶
Nambarada deg-degga ahi way ku kala duwan yihiin waddan ahaan. Boggani wuxuu isticmaalaa 911, lambarka Maraykanka iyo Kanada. Wadamo badan oo kale ayaa isticmaala 112, 999, ama nambar kale. U hel lambarka wadankaaga.
Nidaamyada wireless-ka ee muddada-gaaban (Apple AirDrop, NameDrop, Android Quick Share, Bluetooth Low Energy / BLEiyo Apple Continuity / AWDL) iyo falanqeeyayaasha fariimaha-warbaahinta qani ah (iMessage, WhatsAppiyo WebKit) waxaa loogu talagalay ku habboonaanta habaynta eber ee aan dadaalka lahayn. Si kastaba ha ahaatee, ku habboonaantaas waxay abuurtaa laba xaaladood oo degdeg ah oo kala duwan. Marka hore, meelaha caamka ah sida baabuurta dhulka hoostiisa mara, diyaaradaha, hoolalka muxaadarooyinka, mudaaharaadyada, ama garoomada, shisheeyaha ayaa ku qarxin kara sawirada garaafyada aan la rabin ee shaashaddaada AirDrop / Quick Share ("cyber-flashing"), si lama filaan ah u kicin xiriir isku bedelasho iyada oo la adeegsanayo iOS NameDrop, ama ku qabooji shaashadda taleefankaaga iyagoo isticmaalaya soo-boodayaal isku-duuban oo aan dhammaad lahayn. $170 Flipper Zero / ESP32 Tamarta Hoose ee BluetoothBLE) Daadka Xayeysiinta. Midda labaad, saxafiyiinta baadhista, qareennada xuquuqul insaanka, madaxda sare, dublamaasiyiinta, mucaaradka siyaasadda, ama bartilmaameedyada qiimaha sare leh, spyware ganacsiPegasus, Predator, Reign, GraphiteKa faa'iidayso ** eber-guji dayacanka *** gudaha iMessage, FaceTime, WebKit, ama saldhigyada gacanta si ay u khalkhal galiyaan taleefannada gacanta si aamusnaan ah iyadoon dhibbanuhu waligiis taaban hal xiriiriye.
Haddii aad ku jirto khatar jireed oo degdeg ah ama aad la kulanto handadaad shakhsi ah oo sharci darro ah gaadiidka dadweynaha ama qolka diyaaradda, u guur meel nabdoon oo u dhow shaqaalaha gaadiidka ama shaqaalaha diyaaradda oo wac lambarkaaga degdegga ah (911 in the United States and Canada, 112 across the European Union, 999 in the United Kingdom) or consult our directory of international nambarada degdega ah. Follow the steps below to shut down unsolicited wireless drops in 5 seconds, stop BLE popup floods, and activate Apple Lockdown Mode or Android Advanced Protection against zero-click exploits.
Hadda samee tan¶
- If you are currently receiving unsolicited AirDrop photos, Android Quick Share files, or nonstop Bluetooth pairing popups on a train, plane, or crowd, swipe down your Control Center / Quick Settings and turn OFF both
AirDrop / Quick ShareANDBluetoothinside the mainSettingsapp (not just the Control Center icon). Tapping the Bluetooth icon in Apple's iOS Control Center only disconnects current accessories until tomorrow morning while leaving the Bluetooth Low Energy (BLE) controller andApple Wireless Direct Link (AWDL)radio active in the background. To physically power down the Bluetooth radio chip against a Flipper Zero BLE flood, you must openSettings -> Bluetooth -> Toggle OFF. - Never tap
AcceptamaOpenon an unsolicited AirDrop, Quick Share, or Bluetooth file transfer, and know that Apple's AirDrop preview thumbnail is rendered before you tap Accept. Set AirDrop toReceiving Off(orContacts Only) atSettings -> General -> AirDrop, and set Android Quick Share (Settings -> Connected devices -> Connection preferences -> Quick Share -> Who can share with you) toContacts onlyamaOffso your phone's thumbnail parser never processes untrusted files from strangers. - Disable
Bringing Devices Together(NameDrop) inSettings -> General -> AirDropif you carry your iPhone in crowded spaces or place it on conference tables. Introduced in iOS 17+,Bringing Devices Togethertriggers a contact-card or SharePlay prompt whenever two iPhones are held within2 centimeters (0.8 inches)of each other. Turning offBringing Devices Togetherstops proximity-bump triggers completely while still allowing manual AirDrop when you want it. - If you received an official
Apple Threat NotificationamaGoogle Threat Analysis Group (TAG)warning that your phone is being targeted by State-Sponsored / Mercenary Spyware (or if you are a high-risk journalist, lawyer, dissident, or executive), turn ONLockdown Modeimmediately. On iPhone, iPad, and Mac, go toSettings -> Privacy & Security -> Lockdown Mode -> Turn On Lockdown Mode -> Turn On & Restart. Lockdown Mode is an extreme, hardware-backed defense that disables zero-click iMessage attachment parsers, blocks JIT JavaScript compilation, drops unknown FaceTime calls, blocks 2G/3G cellular baseband downgrades, and disables wired USB data connections while the phone is locked. - If you suspect an active zero-click memory-resident spyware infection (
Pegasus/Predator), reboot your phone right now and capture an iOSsysdiagnose/ encrypted backup forMVT(Mobile Verification Toolkit) forensic analysis BEFORE factory-resetting. Because modern mercenary spyware is designed to avoid being captured and reverse-engineered by security labs, many variants reside strictly in volatileRAM(Random Access Memory) rather than modifying the read-only signed operating system partition. Powering the phone completely off and back on flushes volatile RAM, forcing the attacker to burn a brand-new exploit to re-infect you (which is completely blocked once Lockdown Mode is turned on). - If your concern is domestic abuse, an ex-partner, or a jealous spouse reading your texts rather than a million-dollar government intelligence agency, follow our domestic stalkerware protocol first. Over 99 percent of interpersonal spying uses shared iCloud/Google credentials, WhatsApp Linked Devices, or sideloaded Android
.APKstalkerware rather than zero-click exploits (see our complete guide on Helitaanka stalkerware, spyware, iyo galaangalka qarsoon ee taleefannada).
flowchart TD
A["Wireless Intrusion or Spyware Crisis on Smartphone / Laptop"] --> B{"What is happening right now?"}
B -->|"Unsolicited AirDrop / Quick Share photo or file popup in a crowd"| C["Tap 'Decline' immediately -> Open Settings -> Set AirDrop / Quick Share to 'Receiving Off'"]
B -->|"Nonstop Apple TV / AirPods popup spam freezing screen (Flipper Zero BLE Flood)"| D["Open main Settings app -> Bluetooth -> Toggle OFF (Control Center toggle alone does NOT stop BLE)"]
B -->|"Helay Apple/Google Mercenary Spyware Digniin ama Bartilmaameed Halis Sare ah (Saxafi, Qareen, Fulinta)"| E["1. Taleefanka dib u kab isla markiiba si aad u daadiso RAM-ka-degaanka wax basaasa"]
E --> F["2. Daree habka qufulka ee iOS/macOS (Settings -> Privacy & Security -> Habka Qufulka) ama Android 15/16 Ilaalinta Sare"]
F --> G["3. Disable iMessage & FaceTime if under active attack, and run Amnesty MVT forensic check on encrypted backup"]
B -->|"Suspected domestic / partner snooping on texts or GPS"| H["Run iOS Safety Check / Audit WhatsApp Linked Devices & Android Accessibility (See Stalkerware Guide)"]
Diagnostic matrix: distinguishing Public Wireless Harassment, BLE DoS Spam, and Zero-Click Spyware¶
When strange popups appear on your phone or you worry about wireless hacking in public spaces, use this technical matrix to identify the exact threat and its real-world capability:
| Threat Type | How the Attack Works Over the Air | Can It Steal Your Passwords or Install Spyware Without You Clicking? | Exact Technical Defense |
|---|---|---|---|
1. Unsolicited AirDrop / Android Quick Share ("Cyber-Flashing" or Phishing .URL / .APK Drop) |
Someone within 9 meters (30 feet) has their phone set to share a photo, contact card (.vcf), website link, or file with any nearby device that left AirDrop set to Everyone for 10 Minutes or Quick Share set to Everyone. |
No (on patched iOS/Android). Declining the prompt leaves zero files on your phone. However, the preview image renders on your screen before you tap Decline, and tapping Accept on an Android .APK or phishing link can compromise you. |
Set AirDrop -> Receiving Off (and turn off Bringing Devices Together), and set Quick Share -> Off ama Contacts Only. |
2. Flipper Zero / ESP32 Bluetooth Low Energy (BLE) Advertising Flood ("Wall of Flippers" Popup DoS) |
A prankster or attacker within 10 to 30 meters (33 to 100 feet) uses a Flipper Zero, Android BLE spam app, or ESP32 radio to broadcast thousands of spoofed Apple Continuity, Fast Pair (Android), or Swift Pair (Windows) Bluetooth advertisement packets per second, popping up endless "Connect New AirPods / Set Up New Apple TV" cards on every screen in the room. |
No. It is a Denial-of-Service (DoS) annoyance, not a data-stealing hack. Tapping "Dismiss" or even accidentally tapping "Connect" on a spoofed BLE advertisement packet cannot extract files, passwords, or photos from your phone; at worst, flooding millions of packets can temporarily freeze the UI until you walk away or turn Bluetooth off. |
Turn Bluetooth completely OFF inside Settings -> Bluetooth (not Control Center), and on Windows disable Show notifications to connect using Swift Pair (Settings -> Bluetooth & devices -> Devices). |
3. AWDL (Apple Wireless Direct Link) & Bluetooth Contact-Hash / MAC Tracking |
When AirDrop or Continuity is active, Apple devices create a peer-to-peer Wi-Fi mesh (AWDL) and exchange truncated SHA-256 hashes of phone numbers and email addresses to check if you are in each other's address books. |
** Ma rakibo malware ***, laakiin cilmi-baarayaasha sare waxay caddeeyeen in ka tegista helitaanka AirDrop/Wi-Fi furan ay u oggolaan karto wax-uriya maxalli ah oo casri ah oo leh miis qaanso roobaad oo horay loo xisaabiyay oo lambarro taleefan ah si loo qiimeeyo lambarka taleefanka bartilmaameedka. | Ku hay AirDrop ku dhig Receiving Off oo karti Qaabka Qufulka (ama dami Wi-Fi/Bluetooth aagagga khatarta sare leh). |
4. Eber-guji Spyware Mercenary Spyware (Pegasus, Predator, Triangulation, Graphite) |
Waxaa si gaar ah loo sii marsiiyaa $500,000+ Silsilad-ka-faa'iidaysiga dawladda/sirdoonka. Weerarku waxa uu soo diraa wax aan la arki karin, oo khaldan iMessage culayskaBLASTPASS / FORCEDENTRY sawir/PassKit/PDF parser ka faa'iidayso), xidhmada wicitaanka WhatsApp, ama qaab-dhismeedka saldhiga gacanta ee qallafsan kaas oo kiciya bug xusuusta-musuqmaasuqa ee gadaasha iyada oo aan taleefanku xitaa dhawaaqin ama shidan. |
**HAARCEiyo kordhinta mudnaanta kernel, akhrinta dhammaan fariimaha, quudinta kamaradaha, maqalka makarafoonka, iyo iskuduwayaasha GPS ilaa dib loo bilaabo ama la xannibo. |
** Dib u kici maalin kasta *** (wuxuu baabi'iyaa rakibaadda RAM-ka ee aan joogtada ahayn) + ** Daar iOS/macOS Lockdown Mode** (taasoo gabi ahaanba baabi'isa iMessage/Font/Image/JIT parsers-ka adag ee eber-riix ka faa'iidaysigu u baahan yahay inuu socdo). |
Wajiga 1: Joojinta AirDrop, NameDrop, Share Degdegga ah, iyo Flipper Zero BLE weerarrada ka dhaca dadweynaha¶
Haddi aad ku safrayso tareen, ka qayb galayso shir, ku duulayso diyaarad ganacsi, ama aad ku dhex socoto mudaaharaad, habee afartan shixnad ee bilaa-waayirka ah si aanu shisheeye ku dhex jirin raadiyaha u riixin hal popup ama fayl galiyo shaashaddaada.
1. Apple iPhone, iPad, iyo Mac (AirDrop, NameDrop, & Continuity Adkeynta)¶
- Xiritaan
AirDropiyoNameDrop(Settings -> General -> AirDrop): - Dooro
Receiving Off(orContacts Only; Ogsoonow in xitaa Apple-ga cusub ee caadiga ah uu u beddelo "Qof walba" *"Qof walba 10 daqiiqo", ka dib si toos ah ayuu u soo noqdaa, laakiin wuxuu dejiyaaReceiving Offwaa meesha ugu nabdoon meel fagaare ah). - Si toos ah taas ka hooseysa isla shaashada, dami ** Off ***
Bringing Devices Together(tani waxay joojinaysaaNameDropiyo u dhawaanshaha SharePlay waxay kicisaa marka qof ku garaaco iPhone-kiisa kaaga). - Hoos ugu dhaadhac dhanka hoose ee shaashadda AirDrop oo dami ** Off ***
Use Cellular Datasidaas darteed wareejinta bilaa-waayirka ah ee go'ay weligood kuma sii socon karaan intarneedka ka dib markaad ka baxdo. - ** Faham "Xarunta Kontoroolka Bluetooth Trap" ee iOS:**
- Markaad dabo Xarunta Kontaroolka ee iPhone ama iPadka taabo calaamada Bluetooth*ama Wi-Fi si ay u noqoto cadaan/cawlan ( adoo tidhaahda "Ka goynta Aaladaha Bluetooth ilaa Berrito"), **Iphone-ka Bluetooth-ka iyo raadiyaha Wi-Fi-gaagu wali waa daaran yahay
AirDrop,AirPlay,Apple Pencil,Apple Watch,Find My networkiyoContinuity Handoff. - Sababtoo ah raadiyaha ayaa wali dhageysanaya xirmooyinka Apple Continuity BLE, Flipper Zero BLE Spam weerarka ayaa wali ku qulquli doona shaashaddaada xitaa ka dib markaad Bluetooth ka damiso Xarunta Kontroolka.
- ** Sida Dhabta Loo Damiyo Raadiyaha:** Fur ** Settings** app -> Taabo Bluetooth -> U rogo sayidkii beddelka ** OFF (
Gray** (ama samee 1-tabo iOS Shortcut adoo isticmaalayaSet Bluetooth -> Turn Bluetooth Offaction, kaas oo si dhab ah hoos ugu dhigaya qalabka raadiyaha qalabka). - Dami Aan la rabin
AirPlay / Handoff&Auto-Join HotspotDalabyo (Settings -> General -> AirPlay & Continuity): - U deji Si toos ah AirPlay u deji
Never(orAsk), Dami ** Dami *Handoffmarka aad dhex marayso bay'ada khatarta sare leh, iyo hoosta Settings -> Wi-Fi -> Weydiiso inaad ku biirto shabakadaha/Auto-ku biir Hotspot, u dhig labadabaOffamaAsksidaas darteed raadiyeyaasha u dhow dhow ma kicin karaan gacan-qaadka gadaal.
2. Android Smartphones (Quick Share / Nearby Share & Google Fast Pair Adkeynta)¶
Google waxa uu ku daray Qaybta dhow iyo Samsung Qaybta Degdega ah oo ay ka dhigtay hal nidaam ** Wadaag Degdega ah** ee dhamaan aaladaha Android:
1. Fur ** Settings -> Qalabka ku xidhan -> Xulashada Xidhiidhka -> Wadaag Degdegga ah** (ama Samsung Galaxy: ** Settings -> Qalabka ku xidhan -> Wadaag Degdegga ah**).
2. Taabo Yaa kula wadaagi kara oo ka beddel Qof walba una beddel Contacts only (oo dami * Oggolow qof walba 10 daqiiqo*) ama dami ** wadaagga degdega ah gabi ahaanba DAM**.
3. ** Jooji Flipper Eber Google Fast Pair Earbud Spam on Android:** Haddii qof ku jira kafateeriyada ama hoolka muxaadarada uu baahinayo baakadaha Google Fast Pair Bluetooth baakadaha (taasoo keenaysa sawirada taleefanka dhagaha ee Pixel Buds / JBL been abuur ah inay ka soo baxaan shaashadda Android kaaga), fur ** Settings -> Google -> Dhammaan adeegyada -> Qalabka & wadaaga -> Aaladaha** oo beddel ** OFF ** Scan for nearby devices.
4. Dami asalka asalka ah ee Bluetooth & Wi-Fi scan (Settings -> Location -> Location services:* Xataa marka Bluetooth-ku damiyo Android, iskaanka goobta asalka ahi wali wuu garaaci karaa raadiyaha BLE ilaa aad furto ** Settings -> Goobta -> Adeegyada Goobta** oo dami ** Off *** Bluetooth scanning iyo Wi-Fi scanning.
3. Windows 10 & Windows 11 LaptopNearby Sharing & Swift Pair Adkeynta)¶
- Fur Settings -> System -> wadaagga dhow oo dooro
Off. - Fur ** Settings -> Bluetooth & aaladaha -> Aaladaha** oo ka saar
Show notifications to connect using Swift Pair(taas oo joojisa soo-bandhigidda Bluetooth-ka ee meelaha lagu qaxweeyo iyo garoomada diyaaradaha).
Marxaladda 2: Ku hawlgelinta iyo la noolaanshaha Apple Lockdown Mode (The Zero-click Shield)¶
Waxaa lagu soo bandhigay iOS 16, iPadOS 16, macOS Ventura, laguna balaariyay iOS 17/18+ iyo watchOS 10+, Qaabka Qufulka Apple waa mid ka mid ah guulaha injineerinka difaaca ee ugu saameynta badan taariikhda amniga internetka ee macaamiisha. Ansixinta madax-bannaanida ee baaritaanka ** Citizen Lab (Jaamacadda Toronto)** iyo Shaybaarka Amnesty International's Security Lab waxay xaqiijiyeen bartilmaameedyada adduunka dhabta ah ee awood u siinaya ** Habka Qufulka** ayaa si isdaba joog ah xannibay firfircooni, toos ah. $1,000,000+ eber guji Pegasus (BLASTPASS / PWNYOURHOME) ka faa'iidayso isku dayga duurjoogta, oo xitaa ka soo baxa ogeysiis digniin ah oo toos ah shaashadda isticmaalaha isagoo leh: "Lockdown Mode prevented an unknown contact from interacting with your device."
1. Waa maxay Lockdown Mode Dhab ahaantii Isbeddelka Gudaha iPhone kaaga, iPadka, iyo Mac¶
Sababtoo ah eber-guji spyware calooshood u shaqeystayaal ah kuma weydiin karo inaad gujiso xiriiriyaha, waa inay ka faa'iideysato kakan, baarayaasha koodka dhaxalka ah ee si toos ah ugu shaqeeya gadaasha (sida matoorada gudbinta font, sawirada/fiiriyaasha PDF ee iMessage, WebKit Just-In-Time JIT compilers, ama 2G cellular basebands). Daminta Qaabka Qufulka waxay si qalliin ah meesha uga saaraysaa dhammaan dusha weerarka ** 8 hab-hoosaadyada qalabka iyo software-ka ***:
| Nidaam hoosaadka | Habdhaqanka caadiga ah ee iOS / macOS | Dhaqanka Adag Marka Lockdown Mode Waa la dajiyay |
|---|---|---|
1. Fariimaha (iMessage) |
Si otomaatig ah ayuu u miisaamaa oo u eegaa xiriiriyeyaasha qani ah, PDFs, PassKit boorsada jeebka, qoraallada maqalka ah, xarfaha gaarka ah, iyo qaabab muuqaal adag (TIFF, GIF, PSD, HEIC metadata). |
Waxay xannibtaa ku dhawaad dhammaan noocyada lifaaqa fariimaha aan ka ahayn sawirro, muqaal, iyo maqal gaar ah oo nabdoon; waxay gebi ahaanba baabi'isaa isku xidhka aragtiyaha; oo kala saara baarayaasha metadata kakan halka FORCEDENTRY iyo BLASTPASS noolaa. |
2. Daalacashada Mareegta (WebKit / Safari) |
Waxay u sahlaysa xawaaraha-sare Waqtiga-Waqtiga-KaliyaJITIsku-dubaridka JavaScript, WebAssembly (Wasm), WebGL, xarfaha webka fog ee gaarka ah, iyo samaynta SVG/MathML kakan. |
Waxay joojisaa isku-darka JIT JavaScript caalami ahaan (waxay baabi'inaysaa 80%+ silsiladaha ka faa'iidaysiga xusuusta browserka) oo waxay xannibtaa xarfaha webka fog ee aan la aamini karin iyo baarayaasha warbaahinta adag ilaa aad gacanta ka saarto goob lagu kalsoon yahay mooyee. |
3. Adeegyada Apple (FaceTime, Shared Albums, Home, Game Center) |
Oggolow wicitaanada soo socda ee FaceTime iyo martiqaadyada adeegga aqoonsiga Apple ama lambarka taleefoonka haddii aan la xannibin. | Si toos ah u tuura dhammaan wicitaannada FaceTime ee imanaya iyo martiqaadyada adeegga qof kasta oo aanad shakhsi ahaan u wicin ama la xidhiidhin 30-kii maalmood ee la soo dhaafay, oo wuxuu damiyaa Albamamada Sawirrada la wadaago ee ku jira abka Sawirrada. |
4. Isku xirka USB / Thunderbolt fiilada ah (Juice-Jacking & GrayKey / Cellebrite Defense) |
Oggolow qalabyada ama kombiyuutarada la aaminsan yahay inay ka gorgortamaan xogta haddii la furo ama dhawaan la aamino. | **Waxay si buuxda u xannibaysaa dhammaan isku xidhka xogta USB/Hillaaca/USB-C inta uu iPhone/iPad xidhan yahay |
5. Saldhigga Wireless & Cellular (2G / 3G & Wi-Fi aan la hubin) |
Hoos u dhigi kara dhaxalka 2G (GSM) ama 3G munaaradaha gacanta haddii calaamadda 4G/5G hoos u dhacdo, oo si toos ah ugu biirto shabakadaha Wi-Fi ee furan. |
** blocks adag 2G iyo 3G isku xirka shabakada gacanta *** (guuldarada IMSI-Catcher / Stingray hoos u dhigida weerarrada ka faa'iidaysanaya sirta GSM ee dhaxalka u ah) oo waxay ka hortagtaa in si toos ah ugu biiraan shabakadaha Wi-Fi ee aan suganayn (iPhone 14+ / iOS 17+). |
6. Xogta Habaynta (.mobileconfig) & MDM |
Oggolow rakibida astaanta gaarka ah ee VPN/xididka profiles-ka ama iska-diiwaangelinta MDM haddii isticmaaluhu galo koodka furaha. | Waxay si buuxda u mamnuucday rakibidda Xogaha Habayntu ama isdiiwaangelinta Maaraynta Aaladda Mobaylka (MDM) iyadoo Habka Lockdown uu shaqeynayo. |
7. Xogta badan ee Goobta Sawirka (EXIF GPS) |
Waxaa ku jira isku-duwayaasha GPS-ka marka la wadaagayo sawirada ilaa gacanta lagu demiyo sawirkiiba. | ** Si toos ah u gooya xogta badan ee goobta GPS (EXIF*** mar kasta oo aad qof la wadaagto sawirka maktabadaada. |
8. Lammaaneeyay Apple Watch Ilaalinta |
Hawlgalka caadiga ah ee watchOS. | Daarista Habka Qufulka ee iPhone-kaaga ** waxay si toos ah u hawlgelisaa Qaabka Qufulka ee lamaananahaaga Apple Watch *** (watchOS 10+). |
2. Sida loo shido Lockdown Mode (iyo sida loo cadeeyo Hal App ama Website)¶
- ** IPhone ama iPad-ka:** Fur ** Settings -> Asturnaanta & Ammaanka** -> U dhaadhac xagga hoose oo taabo Qaabka Qufulka -> Taabo Daar Habka Qufulka -> Akhri soo koobidda oo taabo Daar oo dib u bilow -> Geli lambarkaaga qalabka.
- ** ee Mac (
macOS Ventura / Sonoma / Sequoia+):** Fur Nidaamka Settings -> Qarsoodi & Nabadgelyo -> U dhaadhac xagga hoose oo guji Qaabka Qufulka -> Guji ** Daar...** -> Guji ** Daar oo Dib u bilow - ** Sida loo caddeeyo hal mareeg ama App-ka kaliya ee la aamini karo ee u baahan JIT JavaScript (Adoon Demin Habka Qufulka):** Haddii goob shaqo oo gaar ah (sida Figma ama dashboard-ka bangiga) ay jebiso Safari sababtoo ah JIT ama xarfaha astaanta gaarka ah waa la xannibay:
- Gudaha Safari, ku dhufo ** Settings bogga (
AAama Halxiraalaha/Menu icon)** ee ciwaanka ciwaanka -> Taabo ** goobaha degelka** -> Dami ** Dami ***Enable Lockdown Modeloogu talagalay kaliya goobtaas kaliya ee la aamini karo. - App-ka gaarka ah ee lagu rakibay IOS App: Tag Settings -> Privacy & Security -> Qaabka Qufulka -> Habee Browsing Web oo ka saar kaliya hal abka la xaqiijiyay.
Marxaladda 3: Android Advanced Protection & 2G Cellular Disable Isticmaalayaasha Khatarta Sarreeysa¶
Haddii aad isticmaasho casriga Android (gaar ahaan Google Pixel 8/9+ ama Samsung Galaxy S23/S24/S25+), awood u yeelo qalabkan ku dhex-jira iyo difaaca OS eber-guji hadda:
- Dila
2G / GSMBaseband Downgrade Vector: - Fur ** Settings -> Shabakadda & internetka -> SIM-yada -> [ Qaadahaaga ]** -> Hoos ugu dhaadhac
Allow 2Goo dami ** Off *** (Samsung Galaxy: ** Settings -> Amniga iyo asturnaanta -> Auto Blocker -> Xayiraadaha ugu badan**). - Waa maxay sababta ay tani muhiim u tahay: Taawarrada unugyada been abuurka ah (
Stingrays / IMSI-catchers) iyo basaska SMS Blaster waxay ku qasbaan telefoonada u dhow inay ka soo dhacaan 5G/LTE sir ah ilaa 1990-meeyadii2G (GSM), kaas oo aan lahayn xaqiijinta munaaradda labada dhinac, taasoo u oggolaanaysa weeraryahannada in ay dhexgalaan koodka SMS-ka oo ay ku duraan faa'iidooyinka guntinnada gunta hoose. - ** Daar Samsung
Auto Blocker&Maximum Restrictions(Hal UI 6+):** - Taleefannada Samsung Galaxy, fur Settings -> Security and Privacy -> Auto Blocker oo daar ** SHIR *** Tani waxay xannibaysaa weerarrada duritaanka xogta fiilada USB, waxay xannibtaa culeyska dhinaca
.APKfaylal, oo shaqaysiiya ** Ilaaliyaha Farriinta** (kuwa meel eber-guji santuuqa-cammuudka oo dabinnada sawirada xaasidnimada leh ee fariimaha Samsung, fariimaha Google-ka, iyo WhatsApp ka hor inta aysan taaban xusuusta nidaamka). - ** Daar
Memory Tagging Extension (MTE)Google Pixel 8/9+:** - Qalabka ARM v9 ** Kordhinta Calaamadaynta Xusuusta (
MTE** wuxuu ogaadaa qulqulka kaydinta iyo isticmaalka-ka dib musuqmaasuqa xusuusta bilaashka ah wakhtiga dhabta ah ee heerka silikon CPU, isagoo garaacaya eber-guji ka faa'iidaysiga microsecond wuxuu isku dayaa inuu ku beddelo ciwaanka xusuusta ku xiga. Ka yeel hoosta ** Settings -> Amniga & sirnimada -> Amni iyo sir badan -> Calaamadaynta xusuusta** (ama gudaha Xulashada Horumarineed / Ilaalinta Sare). - Isdiiwaangeli
Google Advanced Protection Program (APP): - Booqo
https://landing.google.com/advancedprotection/si aad ugu xidho akoonkaaga Google-ka FIDO2 Hardware Furayaasha/Passkeys-ka qasabka ah, ka jooji dhammaan barnaamijyada OAuth ee dhinac saddexaad ee aan la aamini karin (eeg OAuth waxay ogolaatay phishing iyo burinta ogolaanshaha abka dhinac saddexaad ee xaasidnimada leh), oo dhaqan geli iskaanka Play Protect qoto dheer.
Marxaladda 4: Sida loo sameeyo jeeg dambi-baadhiseed ee Mercenary Spyware (Amnesty MVT & iVerify)¶
Maxaa dhacaya haddii aad tahay wariye, dhaqdhaqaaqe, qareen, ama fulinta oo aad heshay ** Ogeysiinta Hanjabaadda Apple ** iimaylka/iMessage (oo arag banner markaad gelayso appleid.apple.com ama account.apple.com), AMA talefankaagu waxa uu muujiyaa calaamadaha tanaasulka horumarsan (dib-u-bilaabid iskiis ah, batari aad u dareera marka uu qabow yahay ama shaqaynayo, ama isticmaalka xogta ee kor u kaca IP-yada aan la garanayn)?
Danger
** Ka digtoonow Been Abuur "Mercenary Spyware" Emails phishing:** Apple iyo Google waxay daabaceen sharciyo adag sida ogeysiisyada halista dhabta ah u shaqeeyaan: Ogaysiinta Hanjabaadda Apple ee dhabta ah waligeed kuma waydiin doonto inaad gujiso xiriirinta, fur lifaaqa, rakibto profile, ama bixiso aqoonsiga Apple ID password ama code xaqiijintahttps://account.apple.com gacanta, oo soo gal: haddii Apple ay si dhab ah u ogaato weerarka basaasnimada ah ee calooshood u shaqeystayaal ah ee adiga kaa soo horjeeda, calaamad caan ah ** Calan Ogeysiinta Hanjabaadda ** ayaa lagu soo bandhigi doonaa midigta xagga sare ee bogga akoonkaaga Apple.
Talaabo-tallaabo Kala-soocidda Dambi-baadhista iyadoo la adeegsanayo Amnesty International MVT (Mobile Verification Toolkit)¶
*** Ha si fudud u tirtirin taleefanka marka hore haddii aad u baahan tahay inaad caddeyso iyo in kale Pegasus, Predator, ama Triangulation ayaa goob joog ahaa, sababtoo ah tirtiriddu waxay baabi'isaa agabka baadhista ee ay u baahan yihiin Citizen Lab ama Amnesty International:
1. Telefoonka mar dib u shid oo shid Lockdown Mode: Tani waxay joojinaysaa sifaynta RAM-degayaasha ee firfircoon iyadoo la ilaalinayo diiwaannada ogaanshaha diskka (Shutdown.log, DataUsage.sqlite, DiagnosticPipeline, WebKit khasnado, iyo SMS.db miisaska lifaaqa).
2. Ku rakib Amnesty International's Free, Source-source MVT (Mobile Verification Toolkit) Kumbuyuutar Linux ah oo nadiif ah ama macOS:
# Install MVT via pipx or Python 3 venv on macOS or Linux:
pip3 install mvt
# Download the latest public Indicators of Compromise (STIX2 IoCs for Pegasus, Predator, Reign, etc.) from Amnesty's repository:
mvt-ios download-iocs
mvt-ios:**
# 1. Create an encrypted local backup of the iPhone using libimobiledevice (or Finder) to a folder:
idevicebackup2 backup --full ~/Desktop/iphone_forensic_backup/
# 2. Decrypt the backup using your backup password and run MVT's full forensic check against known spyware IoCs:
mvt-ios decrypt-backup -p "YourBackupPassword" -d ~/Desktop/decrypted_backup/ ~/Desktop/iphone_forensic_backup/
mvt-ios check-backup --iocs ~/Library/Application\ Support/mvt/indicators/ -o ~/Desktop/mvt_results/ ~/Desktop/decrypted_backup/
mvt-ios calanka a WARNING tilmaame ama haddii aad heshay Ogeysiiska Hanjabaadda Apple/Google, la xidhiidh ** Hadda gal Khadka Caawinta Amniga Dijital ah (https://www.accessnow.org/help/** ama **Shaybaarka Amnesty International ee Amniga ***, kaas oo bixiya 24/7 xaqiijinta dembiilaha bilaashka ah ee bartilmaameedyada bulshada rayidka ah ee adduunka oo dhan.
Su'aalaha soo noqnoqda¶
Deminta Bluetooth iyo Wi-Fi ee Xarunta Kontroolka iPhone miyay joojisaa Flipper Zero popups ama raadraaca wirelesska?¶
Maya. Hoos u dhigista Xarunta Xakamaynta IOS oo aad taabato Wi-Fi ama badhanka Bluetooth waxay kaliya ka jaraysaa iPhone kaaga Wi-Fi routerkaaga hadda ama taleefoonnada dhegaha ee Bluetooth ilaa 05:00 subaxnimada xigta, iyadoo la ilaalinayo labada Wi-Fi (`AWDL`iyo Bluetooth Tamar yar (`BLE`Chips raadiyaha jir ahaan ku shaqeeya gadaal si ay u taageeraan AirDrop, AirPlay, Find My, iyo Apple Watch isgaarsiinta. Sababtoo ah raadiyaha BLE weli wuu dhegaysanayaa, Flipper Zero BLE daadka daadku wuxuu sii wadi doonaa soo saarista kaadhadhka isku xidhka ee AirPods/Apple TV ee shaashaddaada. Si aad gabi ahaanba u damiso idaacadaha, fur ** Settings** app-ka oo u rogo **Bluetooth** iyo **Wi-Fi****Dami**.
Haddii shisheeyaha saaran tareen ama diyaarad uu ii soo diro AirDrop aan la codsan ama sawir Quick Share ah oo aan taabto "Decline," ma laga yaabaa in teleefankaygu weli ku dhaco fayras?¶
Mid kasta oo casri ah, iPhone ama Android casriga ah, ku dhufo ** Diid *** Xawilaadda AirDrop ama Wadaag Degdegga ah waxay tuuraysaa faylka ka hor inta aan lagu kaydin kaydinta isticmaalaha oo kuma qaadsiin doono taleefankaaga malware. Si kastaba ha ahaatee, sababtoo ah AirDrop waxay ku soo bandhigtaa thumbnail horudhac ah shaashaddaada ka hor intaadan taaban Hoos-u-dhigga (taas oo ah sida "cyber-flashing" dhibaataynta u shaqeyso, iyo sababta sawir-qaadayaasha sawirku ay bartilmaameed u yihiin cilmi-baarayaasha sare), waa inaadan waligaa ka tagin AirDrop ilaa *Qof walba* ama Wadaag Degdega ah oo loo dejiyay *Qof walba*. Ku hay **AirDrop** ku dhig **`Receiving Off`** (or **`Contacts Only`**) marka shisheeyaha xitaa ma kicin karaan aragtida hore ee shaashaddaada.
Waa in isticmaale kasta oo casriga ah uu shido Apple Lockdown Mode maalin kasta?¶
Inta badan macaamiisha caadiga ah uma baahna inay ordaan `Lockdown Mode` 24/7 ilaa ay halis sare ugu jiraan basaasnimada la beegsaday (sida saxafiyiinta, qareenada, madaxda sare, shaqaalaha ololaha siyaasada, dhaqdhaqaaqayaasha, nibiriyada cryptocurrency, ama badbaadayaasha rabshadaha qoyska ee wajahaya cadaw aan caadi ahayn oo farsamo) ama ay ku safrayaan xuduud khatar sare leh ama xukun. Si kastaba ha ahaatee, Qaabka Qufulka ayaa si la yaab leh loogu noolaan karo isticmaalka maalinlaha ah: wicitaanada taleefankaaga, fariimaha qoraalka ah ee joogtada ah, WhatsApp/Signal chats, camera, Maps, Apple Pay, iyo App Store apps dhamaantood waxay sii wadayaan si caadi ah; waxaad si toos ah u luminaysaa horudhacyada isku xirka iMessage, dadka soo wacaya ee FaceTime oo aan la aqoon, iyo xogta dekeda ku dallacaadda USB-ga inta aad xirantahay (oo si fudud ayaad uga saari kartaa degel kasta oo la aamini karo oo u baahan degdeg JIT JavaScript).
Waa maxay sababta ay hay'adaha ammaanku kuugu sheegaan "dib u kici taleefoonkaaga maalin kasta" si aad isaga difaacdo Pegasus oo aad eber gujiso spyware?¶
Labada Hay'adda Ammaanka Qaranka ee Maraykanka (NSA) Hababka ugu Wanaagsan ee Aaladda Mobaylada iyo shaybaadhka Ammaanka ee Amnesty International waxay ku talinayaan in si joogto ah dib loo bilaabo taleefannada casriga ah sababtoo ah eber-guji spyware casriga ah`Pegasus`, `Predator`) kharash malaayiin doollar ah si loo horumariyo loogana fogaado in faylal joogto ah lagu qoro si qarsoodi ah loo saxeexay `/system` qaybta diskka halkaas oo xaqiijinta daacadnimada wakhtiga boot-ka (`Secure Boot` / `dm-verity`) ogaan lahaa. Taa baddalkeeda, spyware-ku wuxuu si adag ugu nool yahay gudaha ** RAM** kacsan ka dib markuu ka faa'iidaysto fariinta ama habka browserka. Deminta taleefankaaga gabi ahaanba oo dib u dami masaxayaasha RAM kacsan, baabi'inta maqaar-galaha firfircoon oo ku qasbeysa qofka wax weeraray inuu halis galo in la ogaado adiga oo ku ridaya faa'iido eber kale (taas oo gabi ahaanba ku guul dareysata haddii aad sidoo kale shido ** Habka Qufulka *** ama aad cusboonaysiiso iOS/Android).
Tilmaamaha la xidhiidha¶
- Helitaanka stalkerware, spyware, iyo galaangalka qarsoon ee taleefannada
- Wi-Fi-ga dadweynaha, meelaha xun ee mataanaha ah, iyo difaaca-jacking juice USB
- Zero-day ka faa'iidayso dhejinta deg-degga ah iyo go'doominta-dhamaadka-Nolosha
- GPS Tracker iyo ogaanshaha dabagalka AirTag
- Afduubka kukiyada fadhiga, malware-ka xog-ururinta, iyo kala noqoshada furaha furaha
- Nambarada xaaladaha degdega ah ee caalamiga ah
Ilaha la hubiyay¶
- Hay'adda Nabadsugidda Qaranka (NSA) & Hay'adda Ammaanka Kaabayaasha Internetka iyo Kaabayaasha (CISA) (Mareykanka): Dhaqdhaqaaqyada ugu Wanaagsan ee Aaladda Mobaylada iyo Hagidda Amniga Isgaarsiinta Mobilka ee Shakhsiyaadka Khatarta Sare leh.
- Apple Inc. (caalami): Tusaha Amniga Platform Apple (* Qaabka qufulka qaab dhismeedka, iMessage
BlastDoorSanduuqa ciidda,AWDL/ AirDrop Cryptographic Identity Gacmo-gacan, iyo Nidaamyada Ogeysiinta Hanjabaadda*). - Shaybaarka Muwaadinka (Dugsiga Munk ee Arrimaha Caalamiga & Siyaasadda Dadweynaha, Jaamacadda Toronto) (Kanada): Warbixinnada Farsamada Farsamada
FORCEDENTRY,BLASTPASS,PWNYOURHOME, iyo Xaqiijinta Adduunka-dhabta ah ee Habka Qufulka IOS. - Shaybaarka Amniga Caalamiga ah ee Amnesty (Caalami): Qalabka Xaqiijinta Mobilka
MVT) Dukumentiyada iyo Habka Dabiiciga ah ee lagu ogaanayoPegasusiyoPredatorBasaasnimada Mercenary. - Kooxda Falanqaynta Khatarta Google (TAG) & Injineerinka Amniga Android (Caalami): Kordhinta Xusuusta Calaamadaynta Android (
MTE),2GNaafanimada Baseband, iyo Warbixinta Hanjabaadda Iibiyaha Ilaalinta Ganacsiga.