{"id":26098,"date":"2023-04-13T06:57:57","date_gmt":"2023-04-13T04:57:57","guid":{"rendered":"http:\/\/www.infokuryr.cz\/n\/?p=26098"},"modified":"2023-04-13T06:57:57","modified_gmt":"2023-04-13T04:57:57","slug":"fatalni-vas-mobilni-telefon-lze-nyni-hacknout-jedinym-pipnutim-a-vy-ho-neuslysite","status":"publish","type":"post","link":"https:\/\/www.infokuryr.cz\/n\/2023\/04\/13\/fatalni-vas-mobilni-telefon-lze-nyni-hacknout-jedinym-pipnutim-a-vy-ho-neuslysite\/","title":{"rendered":"Fat\u00e1ln\u00ed: V\u00e1\u0161 mobiln\u00ed telefon lze nyn\u00ed \u201ehacknout\u201c jedin\u00fdm p\u00edpnut\u00edm a vy ho neusly\u0161\u00edte"},"content":{"rendered":"
<\/div>\n
\n
\n

Studie ukazuje, \u017ee asistenti od Googlu, Applu, Amazonu a Microsoftu jsou schopni p\u0159ij\u00edmat p\u0159\u00edkazy p\u0159es ultrazvuk.\u00a0Otv\u00edra\u010d dve\u0159\u00ed pro kybernetick\u00e9 \u00fatoky v\u0161eho druhu…<\/strong><\/span><\/p>\n

Kybernetick\u00e9 \u00fatoky se mohou d\u00edt tak\u00e9 prost\u0159ednictv\u00edm zvuku, ale toho byste se nem\u011bli ob\u00e1vat \u2013 nikdy je neusly\u0161\u00edte.\u00a0V\u00fdzkum profesor\u016f po\u010d\u00edta\u010dov\u00fdch v\u011bd z Texask\u00e9 univerzity v San Antoniu (UTSA) a University of Colorado (UCCS) vyvinul novou metodu, jak proniknout do dal\u0161\u00edch za\u0159\u00edzen\u00ed.<\/span><\/strong><\/p>\n

Tato metoda s n\u00e1zvem NUIT (Nearly Inaudible Ultrasound Trojan) v podstat\u011b spo\u010d\u00edv\u00e1 ve<\/span><\/strong>\u00a0vyd\u00e1v\u00e1n\u00ed p\u0159\u00edkaz\u016f hlasov\u00fdm asistent\u016fm od Googlu, Applu, Amazonu nebo Microsoftu pomoc\u00ed ultrazvuku.\u00a0Jakmile p\u0159ijmou p\u0159\u00edkazy p\u0159es sv\u00e9 mikrofony, nezb\u00fdv\u00e1 u\u017e nic d\u011blat.<\/span><\/p>\n

\u201eKdy\u017e hrajete YouTube na chytr\u00e9 televizi, nem\u00e1 ta chytr\u00e1 televize reproduktor?\u00a0Zvuk \u0161kodliv\u00fdch p\u0159\u00edkaz\u016f NUIT se st\u00e1v\u00e1 nesly\u0161iteln\u00fdm a m\u016f\u017ee tak\u00e9 za\u00fato\u010dit na v\u00e1\u0161 telefon a komunikovat s va\u0161imi za\u0159\u00edzen\u00edmi Google Assistant nebo Alexa.\u00a0M\u016f\u017ee se to st\u00e1t i b\u011bhem sch\u016fzek Zoom.\u00a0Pokud n\u011bkdo aktivuje sv\u016fj mikrofon,\u00a0<\/span>m\u016f\u017ee vyslat \u00fato\u010dn\u00fd sign\u00e1l k hacknut\u00ed va\u0161eho telefonu<\/span><\/strong>\u00a0, kter\u00fd je b\u011bhem sch\u016fzky vedle va\u0161eho po\u010d\u00edta\u010de,\u201c\u00a0<\/span>vysv\u011btluje\u00a0<\/span><\/a>Guenevere Chen<\/span><\/a><\/strong>\u00a0, profesorka z UTSA<\/span><\/a>\u00a0.<\/span><\/em><\/p>\n

Spolu s doktorandkou UTSA Qi Xia a Shouhuai Xu, lektorem UCCS, byla autorkou studie, kter\u00e1 bude podrobn\u011b p\u0159edstavena na leto\u0161n\u00edm bezpe\u010dnostn\u00edm kongresu USENIX.<\/span><\/p>\n

Je to proto, \u017ee mikrofony za\u0159\u00edzen\u00ed mohou zachytit a reagovat na p\u0159\u00edchoz\u00ed p\u0159\u00edkazy zvuky, kter\u00e9 hrani\u010d\u00ed s ultrazvukem \u2013\u00a0<\/span>konkr\u00e9tn\u011b ve frekven\u010dn\u00edm rozsahu 16 kHz a\u017e 20 kHz<\/span><\/strong>\u00a0\u2013 n\u011bco, co lidsk\u00e9 ucho nedok\u00e1\u017ee.\u00a0Jak ale\u00a0<\/span>mikrofony v telefonu nebo chytr\u00e9m reproduktoru usly\u0161\u00ed tento zvuk?\u00a0<\/span><\/strong>V\u00fdzkumn\u00edci vysv\u011btluj\u00ed, \u017ee tyto audioz\u00e1znamy by mohly b\u00fdt zve\u0159ejn\u011bny na jak\u00e9koli webov\u00e9 str\u00e1nce nebo platform\u011b, v\u010detn\u011b YouTube, jako n\u00e1vnada, kterou by n\u011bkdo mohl kousnout, ani\u017e by si pasti v\u0161iml.<\/span><\/p>\n

Uvedli, \u017ee zvuky, kter\u00e9 pou\u017e\u00edvaj\u00ed k prov\u00e1d\u011bn\u00ed p\u0159\u00edkaz\u016f, jsou dlouh\u00e9 pouze 0,77 sekundy, co\u017e d\u00e1le komplikuje jejich detekci.\u00a0Jedinou nev\u00fdhodou je, \u017ee vy\u017eaduje ur\u010dit\u00fd objem, aby byl \u00fatok \u00fa\u010dinn\u00fd.\u00a0Pokud si v\u0161ak mysl\u00edte, \u017ee pozn\u00e1te, \u017ee jste se stali ob\u011bt\u00ed, proto\u017ee sly\u0161\u00edte hlas asistenta reagovat na \u017e\u00e1dost, m\u00fdl\u00edte se: p\u0159\u00edkazy mohou tak\u00e9 obsahovat p\u0159\u00edkaz ztlumit hlas, aby ob\u011b\u0165 nev\u011bd\u011bla, co se d\u011bje.<\/span><\/p>\n

Doposud otestovali 17 za\u0159\u00edzen\u00ed r\u016fzn\u00fdch zna\u010dek<\/span><\/strong>\u00a0a t\u00e9m\u011b\u0159 ve v\u0161ech pokusech se jim nepoda\u0159ilo propa\u0161ovat pomoc\u00ed u\u017eivatelsk\u00e9ho rozpozn\u00e1v\u00e1n\u00ed hlasu \u2013 n\u00e1stroje, kter\u00fd umo\u017e\u0148uje pouze v\u00e1m nebo va\u0161\u00ed rodin\u011b mluvit na dan\u00e9 za\u0159\u00edzen\u00ed.\u00a0Pouze v p\u0159\u00edpad\u011b Applu se jim v tom poda\u0159ilo zabr\u00e1nit, pokud nevytvo\u0159\u00ed um\u011bl\u00fd, lidsk\u00fd hlas, kter\u00fd je daleko slo\u017eit\u011bj\u0161\u00ed.\u00a0P\u0159ed\u010d\u00ed v\u0161ak to, \u010deho se v roce 2017 poda\u0159ilo skupin\u011b v\u00fdzkumn\u00edk\u016f z univerzity Zhejiang v \u010c\u00edn\u011b, kte\u0159\u00ed vyvinuli podobn\u00fd model, ale s \u0159adou omezen\u00ed sni\u017euj\u00edc\u00edch jeho nebezpe\u010dnost.<\/span><\/p>\n

\n

Jak m\u016f\u017ee ultrazvuk otev\u0159\u00edt va\u0161e dve\u0159e<\/span><\/h4>\n

Herv\u00e9 Lambert, glob\u00e1ln\u00ed \u0159editel provozu spole\u010dnosti Panda Security, zd\u016fraz\u0148uje, \u017ee tato technologie \u201ep\u0159edstavuje probl\u00e9m pro cel\u00fd sv\u011bt dom\u00e1c\u00ed automatizace a syst\u00e9m\u016f p\u0159ipojen\u00fdch za\u0159\u00edzen\u00ed\u201c.<\/span><\/p>\n

\u201eJeden z nejni\u010div\u011bj\u0161\u00edch sc\u00e9n\u00e1\u0159\u016f je vid\u011bt v hyperpropojen\u00fdch m\u011bstech, kde n\u011bkdo m\u016f\u017ee p\u0159ehr\u00e1vat hudbu nebo video ultrazvukem, aby dos\u00e1hl na mikrofony na ulici,\u201c poznamen\u00e1v\u00e1, ne\u017e uvede dal\u0161\u00ed p\u0159\u00edklady, jako jsou hotely pou\u017e\u00edvaj\u00edc\u00ed podobn\u00e9 syst\u00e9my<\/span><\/strong><\/em>\u00a0.<\/span><\/p>\n

\u201eTohle je fantastick\u00fd sc\u00e9n\u00e1\u0159 pro okr\u00e1d\u00e1n\u00ed host\u016f.\u00a0M\u016f\u017eete m\u00edt dobr\u00fd syst\u00e9m a pak se s n\u011b\u010d\u00edm takov\u00fdm otev\u0159ou dve\u0159e.\u00a0To nen\u00ed sci-fi, ale n\u011bco, co nen\u00ed p\u0159\u00edli\u0161 slo\u017eit\u00e9 vzhledem k \u010dasu a zdroj\u016fm,\u201c<\/span><\/strong><\/em>\u00a0varuje.<\/span><\/p>\n

\u201e\u00a0<\/span>Pokud jste trochu chytr\u00fd a chcete n\u011bkomu nebo firm\u011b ubl\u00ed\u017eit,<\/span><\/strong>\u00a0m\u016f\u017eete to ud\u011blat.\u00a0Pot\u0159ebujete frekven\u010dn\u00ed modul\u00e1tor a mus\u00edte b\u00fdt schopni p\u0159ev\u00e9st p\u0159\u00edkaz do zvuku.“<\/span><\/em><\/p>\n

pokra\u010duje specialista, kter\u00e9ho t\u011b\u0161\u00ed, \u017ee tento mechanismus byl objeven v r\u00e1mci univerzitn\u00edho v\u00fdzkumu a nen\u00ed v\u00fdsledkem \u00fatoku (zat\u00edm nejsou zn\u00e1my \u017e\u00e1dn\u00e9 \u00fatoky tohoto typu ze strany kyberzlo\u010dinc\u016f).<\/span><\/p>\n

Krom\u011b p\u0159\u00edpadu hl\u00e1\u0161en\u00e9ho na \u010d\u00ednsk\u00e9 univerzit\u011b ned\u00e1vno prob\u011bhla studie v\u00fdzkumn\u00edk\u016f z Korea University School of Cyber \u200b\u200b\u200b\u200bSecurity, kte\u0159\u00ed na\u0161li n\u00e1stroj, kter\u00fd fungoval podobn\u00fdm zp\u016fsobem, ale vy\u017eadoval p\u0159edchoz\u00ed instalaci malwaru do za\u0159\u00edzen\u00ed. kter\u00e9 vyu\u017e\u00edvaly ultrazvukov\u00e9 vlny by m\u011bly vyza\u0159ovat, co\u017e tak\u00e9 omezovalo \u00fa\u010dinek, jak uv\u00e1d\u00ed\u00a0<\/span>Bleeping Computer<\/span><\/a><\/strong>\u00a0.<\/span><\/p>\n

V\u00fdvoj\u00e1\u0159i NUIT vyvinuli dv\u011b varianty prov\u00e1d\u011bn\u00ed \u00fatok\u016f.\u00a0V prvn\u00edm p\u0159\u00edpad\u011b je ob\u011bt\u00ed \u00fatoku tak\u00e9 za\u0159\u00edzen\u00ed p\u0159ehr\u00e1vaj\u00edc\u00ed zvuk \u2013 mobiln\u00ed telefon nebo reproduktor.\u00a0Sami zve\u0159ejnili video, ve kter\u00e9m ukazuj\u00ed, jak by otev\u0159eli nap\u0159\u00edklad z\u00e1mek dve\u0159\u00ed p\u0159ipojen\u00fdch k internetu.<\/span><\/p>\n

\n