Google Project Zero mus tob rau FORCEDENTRY Exploit siv los ntawm NSO Group

Google's Project Zero team tau tshaj tawm kev tsom xam ntawm FORCEDENTRY exploit uas tau siv los ntawm NSO Group kom kis lub hom phiaj iPhones nrog nws Pegasus spyware ntawm iMessage.

Citizen Lab pom FORCEDENTRY ntawm ib lub iPhone muaj los ntawm Saudi activist nyob rau lub Peb Hlis; lub koom haum qhia kev siv nyiaj hauv lub Cuaj Hli. Apple tso tawm thaj ua rau thaj rau qhov muaj qhov tsis zoo, uas cuam tshuam rau iOS, watchOS, thiab macOS li, 10 hnub tom qab tshaj tawm ntawd.

Project Zero hais tias nws tau soj ntsuam FORCEDENTRY tom qab Citizen Lab tau qhia ib qho piv txwv ntawm kev siv nrog kev pab los ntawm Apple's Security Engineering thiab Architecture (SEAR) pawg. (Nws kuj tseem sau tseg tias tsis yog Citizen Lab lossis SEAR yuav tsum pom zoo nrog nws "cov kev xav txog kev sau ntawv.")

"Raws li peb cov kev tshawb fawb thiab kev tshawb pom," Project Zero hais tias, "peb ntsuas qhov no yog ib qho ntawm cov kev siv thev naus laus zis tshaj plaws uas peb tau pom dua, ntxiv ua pov thawj tias lub peev xwm NSO muab kev sib tw rau cov uas yav dhau los xav tias yuav siv tau rau tsuas yog ib qho xwb. ntawm teb chaws xeev."

Qhov tshwm sim tawg npog txhua yam los ntawm iMessage qhov kev txhawb nqa rau GIFs-uas Project Zero pab txhais tau tias "feem ntau me me thiab tsis zoo cov duab animated nrov hauv meme kab lis kev cai"-rau PDF parser uas txhawb nqa cov duab qub JBIG2 codec.

GIFs, PDFs, thiab JBIG2 yuav ua li cas nrog kev cuam tshuam lub xov tooj ntawm iMessage? Project Zero piav qhia tias NSO Pawg tau pom txoj hauv kev siv JBIG2 kom ua tiav cov hauv qab no:

"JBIG2 tsis muaj peev xwm sau ntawv, tab sis thaum ua ke nrog qhov muaj qhov tsis zoo, nws muaj peev xwm ua raws cov circuits ntawm cov rooj sib tham tsis ncaj ncees uas ua haujlwm ntawm lub cim xeeb arbitrary. Yog li vim li cas ho tsis yog siv qhov ntawd los tsim koj tus kheej lub computer architecture thiab tsab ntawv ntawd!? Qhov ntawd yog qhov kev siv dag zog no ua. Siv ntau dua 70,000 ntu cov lus txib uas txhais cov kev ua haujlwm me ntsis, lawv txhais lub khoos phis tawj me me nrog cov yam ntxwv xws li cov ntawv sau npe thiab tag nrho 64-ntsis adder thiab sib piv uas lawv siv los tshawb nrhiav thiab ua cov lej lej. Nws tsis nrawm npaum li Javascript, tab sis nws yog qhov sib npaug hauv kev suav. "

Tag nrho cov no yog hais tias NSO Group tau siv cov duab codec uas tau tsim los txhawm rau dub-thiab-dawb PDFs yog li nws tuaj yeem tau txais ib yam dab tsi "piv txwv li kev sib npaug" rau cov lus programming uas tso cai rau lub vev xaib. apps ua haujlwm rau lub hom phiaj lub iPhone.

"Kev ua haujlwm bootstrapping rau sandbox khiav tawm yog sau kom khiav ntawm qhov logic Circuit Court thiab tag nrho cov khoom khiav hauv qhov txawv txawv no, emulated ib puag ncig tsim tawm ntawm ib qho kev decompression dhau los ntawm JBIG2 kwj," Project Zero hais. "Nws zoo kawg nkaus, thiab tib lub sijhawm, txaus ntshai heev."

Qhov xwm zoo: Apple patched FORCEDENTRY nrog kev tso tawm ntawm iOS 14.8 thiab suav nrog kev hloov pauv ntxiv hauv iOS 15 txhawm rau tiv thaiv kev tawm tsam zoo sib xws. Cov xov xwm tsis zoo: Project Zero tab tom rhuav tshem nws cov kev tshuaj ntsuam xyuas hauv ob qhov blog tshaj tawm, thiab nws hais tias qhov thib ob tseem tsis tau tiav.

Tab sis txawm tias tsuas yog ib nrab ntawm qhov kev tshuaj xyuas pab kom demystify qhov kev siv dag zog uas ua rau pej xeem tawm tsam, NSO Pawg tau muab tso rau hauv Cov Ntawv Teev Npe los ntawm US Department of Commerce, thiab Apple qhov kev foob rau lub tuam txhab. NSO Group tsim Pegasus; tam sim no Project Zero tab tom nthuav tawm nws kawm ya li cas.