can we talk a little about mobile security, antivirus and the possibility of viruses or spyware etcetc on our android phones? is ir neccessary to download something like lockout mobile security? dont know if these apps are just scams or what. thx
Related
US-CERT Warns of Microsoft Windows CE Trojan
By Ryan Naraine
2008-02-26
The WinCE/InfoJack Trojan hijacks the infected device's serial number, operating system and other information and uploads it to an attacker-controlled Web site.
The U.S. Computer Emergency Readiness Team has raised an alert for an in-the-wild malware attack against Microsoft Windows CE powered mobile devices.
According to the US-CERT warning, the Trojan horse program is capable of disabling Windows Mobile application installation security.
The Trojan, dubbed WinCE/InfoJack by anti-virus vendor McAfee, has been programmed to hijack the infected device's serial number, operating system and other information and upload it to a Web site controlled by the attacker.
"It also leaves the infected mobile device vulnerable by allowing silent installation of malware. The Trojan modifies the infected device's security setting to allow unsigned applications to be installed without a warning," McAfee said in a post on its Avert Labs blog.
The Trojan was packed inside a number of legitimate installation files and distributed widely. It has been distributed with Google Maps, applications for stock trading, and a collection of games, McAfee said.
Here are some characteristics of the Trojan:
Spreads via seemingly legitimate application installation files
Installs as an autorun program on the memory card
Installs itself to the device when an infected memory card is inserted
Protects itself from deletion by copying itself back to disk
Replaces the browser's homepage
Allows unsigned applications to install without warning
McAfee researcher Jimmy Shah said the ability to allow silent installations of unsigned applications can be used by the Trojan to auto update itself and open a backdoor on the mobile device for future malware installations.
The Web site associated with the Trojan is no longer accessible due in part to an investigation by law enforcement officials, Shah said.
The Trojan was first discovered in the wild in China.
The US-CERT is encouraging Windows CE users to install and run updated anti-virus software on mobile devices and use caution when downloading and installing applications.
Click to expand...
Click to collapse
Source
Check your phones, people.
There has been at least one other WinCE virus, so this is not necessarily new "news". Although it's a much smaller user base, Windows Mobile is a very, very easy platform to abuse maliciously (much like Windows generally, unfortunately).
In normal day to day use you're unlikely to encounter such malware. However, use of warez is going to massively increase your chance of running into this type of stuff, either on your PC or your PPC.
Drive by infections on this platform are still rare, so use good computer hygiene and you should be generally safe, but there is very little to stop programmers abusing your devices in any way they want to, so be wary, even when downloading random stuff from this and other sites!
V
Since this affects Windows CE (Windows Mobile in general?) I guess it affects not only PPC but Smartphones (WM Standard) aswell?
"New mobile virus goes 'old school'
"A new virus is relying on some old tricks to infect Windows Mobile users. The so-called 'companion virus' attack uses a method of assuming the identity of an existing file and moving the old file to a different location.
The virus then runs itself when the original file is called, often loading the displaced file after the virus code has been executed.
Advertisement
When researchers at McAfee first examined the virus, they were surprised to find that such an infection technique was still in use.
"This was a bit odd since companion viruses used to be more popular in the days of DOS and we haven't seen too many on newer platforms," wrote McAfee researcher Jimmy Shah in a blog posting.
Other elements of the virus are quite modern. The code itself is encrypted and polymorphic, allowing the virus to rewrite its own code to avoid detection by security software."
More info: http://www.vnunet.com/vnunet/news/2230514/mobile-virus-goes-old-school
Maybe it's about time to load an antivirus app just to be on the safe side??? I've not bothered with one because I'm afraid it'll slow down my device but if I can have one that can have the realtime scanner disabled when I want it would be great.
Are there any WinMo AV's out there? I have yet to see one...
As long as you do not surf untrusted websites like porn, your device is almost impossible to be infected.
I wonder what the "payload" of the virus is?
Hey, I'm taking a computer auditing course in college, and I've been sort of amazed at the lack of hacker tools on a platform with so many talented developers.
I know we have arp spoofing/poisoning apps, and a couple of scanners like nmap .. but that's about it.
When will android ever see a native version of aircrack, a brute force cracker, or a decent voip sniffer?
It's sort of lame having to get onto a windows system in order to access those tools, and Linux is lacking on mobile devices.
You could try droidsheep (droidsheep.de).
UEman said:
You could try droidsheep (droidsheep.de).
Click to expand...
Click to collapse
Have it, kind of mentioned it in there with other arp spoofing apps like wifikill.
Thanks anyway.
UEman said:
You could try droidsheep (droidsheep.de).
Click to expand...
Click to collapse
How can I use cookies from droidsheep, on my pc?
If your computer is infected with a virus, the first thing that you need to do is to run the best virus removal software that can be downloaded for free from the internet or can be purchased to remove virus. Some sophisticated virus totally disables any anti-virus software and a few of the malware variants will also try to block you from downloading any anti-virus software. Antivirus software is a requirement for users of windows operating system. Viruses can be avoided by practicing safe habits as well but no matter how safe you stay sophisticated viruses are developed everyday looking for ways to infect your system.
Norton removal tool, norton account, norton support, symantec support, norton customer service, norton uninstaller, norton phone number, norton 360 support, symantec removal tool,norton antivirus phone number, norton number, norton customer service number, norton support number, norton renewal, norton phone support.
If your computer is infected with a virus, the first thing that you need to do is to run the best virus removal software that can be downloaded for free from the internet or can be purchased to remove virus. Some sophisticated virus totally disables any anti-virus software and a few of the malware variants will also try to block you from downloading any anti-virus software. Antivirus software is a requirement for users of windows operating system. Viruses can be avoided by practicing safe habits as well but no matter how safe you stay sophisticated viruses are developed everyday looking for ways to infect your system.
Norton removal tool, norton account, norton support, symantec support, norton customer service, norton uninstaller, norton phone number, norton 360 support, symantec removal tool,norton antivirus phone number, norton number, norton customer service number, norton support number, norton renewal, norton phone support.