Researchers find big leaks in pre-installed Android apps - Android General

Hi guyz, check this out:
http://arstechnica.com/tech-policy/...d-big-leaks-in-pre-installed-android-apps.ars
You can even download the full paper in:
http://www.csc.ncsu.edu/faculty/jiang/pubs/NDSS12_WOODPECKER.pdf
After the UniqueIQ and now this... preinstalled apps? Whaddya say?
I remember last week after Stericson' permission app i found all gameloft games i used came with several active sms permission (receive, read, write, send) to my surprise. Turned them all off now, thankyou Stericson ;-)
Not being paranoid but if it's true then HTC is not alone in this. Oh my...

schizo said:
After the UniqueIQ and now this... preinstalled apps? Whaddya say?
Click to expand...
Click to collapse
You mean Carrier IQ ?
Well, android security is still a 'far west'... there's much more gold to dig out
I recently got an exploit for < 2.3.4 that makes you steal data from someone's device thru a malicious web link (and of course QR-Codes and MITM are good attack vectors too). Tested and working on my Ideos.

Yes i mean Carrier IQ. Thx 4the correction.
My point is, if you can't trust manufacturers to have 'safe' practice in creating preinstalled apps, how can you trust aftermarket 3rd party developers?
This security issue needs to get straightened out a little bit by G, i think.

just

Related

Best antivirus for galaxy tab

Hi guys
i just read about trojan attack on android phones and hence i am planning to install antivirus software.
Could you please guide which is the best antivirus for galaxy tab which should not be very resource hungry.
Thanks in advance
Sent from my GT-P1000 using XDA App
I use look out
Sent from my SGH-T849 using Tapatalk
pda_crazy said:
Hi guys
i just read about trojan attack on android phones and hence i am planning to install antivirus software.
Click to expand...
Click to collapse
A report that was released by a company selling anti-virus products for Android. A report that has since been attacked for its credibility, as it seems the "trojan" may simply have been a legitimate (if intrusive) reporting mechanism used by the Chinese store selling those apps.
Bottom line: If you don't side-load content, you simply do not need anti virus on Android. It's a waste of time, money, processing power and battery life. I'm not aware of any known exploits on the Android ecosystem that don't require the user to side-load malware from sources outside the official Android market.
Android isn't windows. Android is a secure architecture from the ground up. Android doesn't have OS holes that need plugging. Android doesn't offer itself up to be infected every time an email is received.
If you're really worried about viruses, simply don't install apps from anywhere except the official Android market. Doing this single thing will do far more to guarantee safety than any anti-virus software.
Now if you do side-load content from questionable sources, an anti-virus product could potentially provide protection. In the real word, anti-virus software rarely recognizes new, zero day exploits. so not all that much protection at all.
After hearing such good things about android i am feeling proud to be android owner.
Sent from my GT-P1000 using XDA App
Do we really need an Antivirus on the Galaxy Tab?
Better safe than sorry especially since there is no rejection poilicy for the market
Sent from my GT-P1000 using XDA App
i think your better served reading the permissions of apps installed.
Things like Applanet that ask for access to log in credentials are far more dangerous then malware.
That is as long as your not getting your apps from chinese markets.
NetQin Android Antivirus
pda_crazy said:
Hi guys
i just read about trojan attack on android phones and hence i am planning to install antivirus software.
Could you please guide which is the best antivirus for galaxy tab which should not be very resource hungry.
Thanks in advance
Sent from my GT-P1000 using XDA App
Click to expand...
Click to collapse
NetQin Android Antivirus, works fine!
TainT said:
i think your better served reading the permissions of apps installed.
Things like Applanet that ask for access to log in credentials are far more dangerous then malware.
That is as long as your not getting your apps from chinese markets.
Click to expand...
Click to collapse
This.
Antivirus apps are not required. These "reports" are from antivirus creators designed to make you think you need one.
Actually read the reports? They are not viruses, but simply permissions you give it when installing anyway.
I wouldn't have thought antivirus was required, especially given Android's base as a Linux. All it would do is waste CPU cycles.
Spent the last 5 years as a Symbian user listening to people claim that AV on the phones was a 'must have'.
Glad to see some things are the same on Android!
A Trojan Horse on Android/Linux is like an upper class chav, it's not going to happen.
Sent from my GT-P1000
EStrong Security manager isn't an antivirus per se but it seems to do a manual scan for malicious apps. They're very vague as to what it actually does though.
I don't really understand why people feel the need to get anti-virus for linux. To get something malicious you've got to install it yourself and thats pretty damn hard considering the phone will tell you what the app is tring to access and even then the app doesn't have any access to any other apps nor does it have root access to the phones file system.... the most it could really do is collect data about you, or maybe delete files on your SD card or something like that.
there is some very naive linux fanboys in here. there is plenty of reasons to have some sort of malware/privacy security on android. there have been various independant confirmations of apps in the market place containing malware espesially in the last month or so.
lookout is a good one or kaspersky. the both have good scanners and also can protect personal info aswell.
TheATHEiST said:
there is some very naive linux fanboys in here. there is plenty of reasons to have some sort of malware/privacy security on android. there have been various independant confirmations of apps in the market place containing malware espesially in the last month or so.
lookout is a good one or kaspersky. the both have good scanners and also can protect personal info aswell.
Click to expand...
Click to collapse
I would think that since the last reply was from January, people would have learnt that.. The last malware incident that got Google involved within 5 minutes and had over 50 apps pulled was pretty well publicized.
Anyway, people have got to realize that no one OS is invulnerable. It's just a matter of time before people start finding exploits when an OS gets popular - for Android that time is now. Heck, not sure how many people are aware, but roots and jailbreaks ARE exploits themselves. Trying scanning the rooting/jailbreaking tools with your desktop AV and all becomes clear.
darkwoof said:
Heck, not sure how many people are aware, but roots and jailbreaks ARE exploits themselves. Trying scanning the rooting/jailbreaking tools with your desktop AV and all becomes clear.
Click to expand...
Click to collapse
Precisely. A rooted device is the best to attack for malware apps. If there's a developer that's smart enough, they can get pretty much anything if you're rooted.
Sent from my GT-P1000 using XDA Premium App
Since I'm rooted, I installed Lookout too.
Funny coz it's easily uninstalled eventhough has apps policy/administrator (I forgot the name)
Well.. I use it mainly for the Missing Device feature (paired with PREY also).
GANJDROID said:
Precisely. A rooted device is the best to attack for malware apps. If there's a developer that's smart enough, they can get pretty much anything if you're rooted.
Sent from my GT-P1000 using XDA Premium App
Click to expand...
Click to collapse
dude you did not understand the last post at all!
you dont need to have your device rooted. a normal market app can root your device without you knowing it, and can then do whatever with your device.
how do you think z4root does root your device? (z4root is an app that does root the phone for you, normally with your knowledge)
Geletis said:
A report that was released by a company selling anti-virus products for Android. A report that has since been attacked for its credibility, as it seems the "trojan" may simply have been a legitimate (if intrusive) reporting mechanism used by the Chinese store selling those apps.
Bottom line: If you don't side-load content, you simply do not need anti virus on Android. It's a waste of time, money, processing power and battery life. I'm not aware of any known exploits on the Android ecosystem that don't require the user to side-load malware from sources outside the official Android market.
Android isn't windows. Android is a secure architecture from the ground up. Android doesn't have OS holes that need plugging. Android doesn't offer itself up to be infected every time an email is received.
If you're really worried about viruses, simply don't install apps from anywhere except the official Android market. Doing this single thing will do far more to guarantee safety than any anti-virus software.
Now if you do side-load content from questionable sources, an anti-virus product could potentially provide protection. In the real word, anti-virus software rarely recognizes new, zero day exploits. so not all that much protection at all.
Click to expand...
Click to collapse
Dude, You have absolutely no clue what you are talking about. MANY malware have been discovered as been submitted and released via market.
http://pocketnow.com/android/google-removes-ten-malware-infected-apps-from-android-market

[Q] Android malware

http://blog.mylookout.com/2011/05/s...ew-malware-from-the-developers-of-droiddream/
is the list of apps that were just discovered over the last few days by Google.
In reading other articles, I see Google will remove them and I wouldn't have a problem, but I'm sure a few of the games I got from Amazon.
Does anyone know how Amazon handles this removable...do I manually look for and delete the games? Guess, I'm assuming Amazon's would hold the possibly of malware, also.
I haven't been through this before, so wanted to ask.
I, also, saw an app Google uses - Android Market Security Tool, I wonder if that's helpful for me for anything from Amazon that I might have downloaded?
Thanks
so be honest what one of the Hot Girls programs listed did you download.
tonyz3, LOL - that's funny.
Well, I did another 30 min. research on web about how Amazon may handle any apps with malware and couldn't find a thing.
So I sent Amazon an e-mail, hopefully I got the right department(s). Telling them I do have some games on that list from them, wanting to know if there's any action I should take or will they?
Apparently Google is on top of it (although they slipped through), but I don't know that Amazon is at this point.
I'll let you know if I hear back from them.
Edit: I should add I'm not having any problem with my TF or apps..just trying to stay ahead of the game.(s) My TF will be 3 weeks old tomorrow, love it and my dock gets here tomorrow-yea!
I don't see a denial there so maybe it's all of them he has installed. Anyways thanks for the heads up. Glad I dont have any of those apps. For future use you may wish to consider installing the AVG free android app called 'Anti-Virus Free'. You can get it HERE.
stuntdouble said:
I don't see a denial there so maybe it's all of them he has installed. Anyways thanks for the heads up. Glad I dont have any of those apps. For future use you may wish to consider installing the AVG free android app called 'Anti-Virus Free'. You can get it HERE.
Click to expand...
Click to collapse
Big Thanks, stuntdouble! For the info and the link.
I'm off to get it now...sounds good.
I just received a response from Amazon, when I questioned the safety of their apps for malware....and they even went the extra mile when I sent a link from mylookout.com listing the apps, they doubled check and they don't carry any of them.
Ok, guess I panicked & I don't have any apps from Amazon on that list(s). But, now I know-lol
Here's their reply:
"All of our games downloads go through a review process which includes virus and
spyware scanning. This is done with software from multiple vendors, and our
games are considered virus-free. I also looked into the article you reference
and was not able to find any of the Apps listed on our website.
Our goal is for Amazon Appstore customers to have a good experience with every
app they buy from the Appstore. As a result, we test all apps and updates prior
to making them available in our store to verify that each app works as outlined
in the product description, does not impair the functionality of the mobile
device, and does not put your data at risk once installed.
I hope this helps, Thanks so much for your interest in the Amazon Appstore.
Did I solve your problem?"
Very nice reply! And I now have AVG and Lookout app on my tablet.
sunsetbay said:
Very nice reply! And I now have AVG and Lookout app on my tablet.
Click to expand...
Click to collapse
I'm curious, did either of those anti-virus apps identify those apps as being malware prior to them being pulled? It doesn't look like it.
"The Lookout Security Team identified the malware thanks to a tip from a developer who notified us that modified versions of his app and another developer’s app were being distributed in the Android Market."
I have nothing against Lookout or any other Android anti-virus, but have the anti-virus apps ever actually found anything? It's not a rhetorical question. I don't use them and truly don't know.
ad1980,
Well, in the end I feel a bit foolish...remember I said I panicked.(s)
Two of the games I thought I had were by a different developer and Tetris that I deleted a couple of weeks ago from my tablet isn't showing up in Google's or Amazon's library any longer. So I'm sure who that developer was.
Sorry, I should have dug further before I started this thread on the developers/games.
In the end, I learned a bit more about malware on a tablet and how Amazon and Google handles it. Right now I have AVG and Lookout Mobile Security that doesn't seem to be slowing me down in any way. Looks like I'll keep both and let them scan
as I download, etc.
Hey I'm glad you posted! I'm curious if anyone has seen some benefit from using these Anti-Virus apps. It sounds great in theory, but does it actually do anything? It appears to me that there's little benefit. From what I can tell it goes something like this:
Malware appears in the Market
Someone informs Lookout/ElGoog/AVG etc...
All companies block/remove the offending apps at about the same time
I guess if you use those shady appstores you could benefit if these specific Malware apps still exist in those places.
I'm still interested to hear if anyone has seen/heard of these apps having a positive effect.
Ad1980 and all, I see this a.m. more malware has been discovered in the Google Market and this article may answer your question on how well anti-virus works - not(s).
http://www.informationweek.com/news/230600068
What I come away with is one person, Xuxian Jiang, discovered them and then reported them to Google and various anti-virus companies. Doesn't sound too proactive does it?
I almost think my Lookout got an update this week, maybe it was this...after the apps have been out for 2 months. But, Lookout did discover the last batch, this one they didn't. Hmmm, I know still in the beginning stages.
One of these Angry Birds add-ons I almost bought, but the reviews were so bad I didn't...guess now I know why it didn't work.(s) Real close that last week I almost did buy it for 2nd or 3rd time, since I'm not doing so well with beating Angry Birds(s).
Just a note to OP: the article you linked states the malware is run by reading phone state, if you hadn't noticed the TF101 is a tablet and not a phone and thus the malware wouldn't ever run.
Ofseshmaru, Oh, you are so right - sorry. And Thank you for correcting me that it's about phones.
Of course, I know TF101 is a tablet and I did miss in reading the article that it's about phones only.
Guess I just saw the malware connection to Google market place again and how it relates to viruses and malware being discovered...still interesting.
In the end looks like that one app add-on I wanted, I wouldn't have been able to get anyway.
@Sunsetbay
Yeah, that's exactly what I'm talking about. It looks like all Lookout would do here is prevent you from downloading a known-malware-laden app. But, if the app is already known to have malware, then Google takes it down and there's no point in having Lookouts protection.
I would love to have a virus protection app that works, but from what I've seen Lookout and the others are all completely retroactive. Anyone have any different experience?
So does this mean there's no use whatsoever in installing anti-malware?
bimmer69 said:
So does this mean there's no use whatsoever in installing anti-malware?
Click to expand...
Click to collapse
If you're only installing apps from Google's market, then you'd likely receive zerobenefit from using any of the anti-malware utilities- as they won't really be offering anything that Google isn't already (the removal of known malware). Even for sideloaded/from other markets, I have to question how effective things like Lookout would really be. It's extremely easy to get root on pretty much any device out there, and once an app has root it's pretty much game over for everyone else on the system.
Anti-malware will always be pretty much the worst line of defense out there (phone, tablet, or desktop- doesn't matter which). They're reactionary in nature, and add a rather large amount of overhead to many common operations on a system.
Unfortunately, until the manufacturers and Google start taking security updates seriously, our phones' security amounts to about as much as a piece of swiss cheese at stopping a typhoon.

[NEWS] Security Experts pleading to Ban Connections on Rooted and Jailbroken Devices

I don't know if this is just an advertising scheme of AVG Mobile Solutions through their Facebook page, but when the banning of banking connections (PayPal, online banking, etc.) on rooted devices is pushed through, DAMN IT WE'RE REALLY F*****!
Read more on AVG Blogs HERE
Definitively a marketing scheme... for the clueless...
"Google is blocking access to some services on rooted devices."
Well.. they did get that spot on..
narflynn619 said:
I don't know if this is just an advertising scheme of AVG Mobile Solutions through their Facebook page, but when the banning of banking connections (PayPal, online banking, etc.) on rooted devices is pushed through, DAMN IT WE'RE REALLY F*****!
Read more on AVG Blogs HERE
Click to expand...
Click to collapse
Don't worry, there is no way for a website to detect if you are rooted or not. There's also no reason for financial companies to do that - they would piss off users for zero gain in security.
Rooted devices are currently unsupported by Google due to requirements related to copyright protection.
Click to expand...
Click to collapse
Uh, what? Google has *only* shipped devices with root capability so far, what is this "unsupported" crap?
kllrnohj said:
Don't worry, there is no way for a website to detect if you are rooted or not. There's also no reason for financial companies to do that - they would piss off users for zero gain in security.
Uh, what? Google has *only* shipped devices with root capability so far, what is this "unsupported" crap?
Click to expand...
Click to collapse
I'm sure they're referring to video rentals from the new market being blocked for people on rooted devices.
Well the security increases a litle on non-rooted devices. Or so they claim.
On a rooted device you tend to screw around a litle more and install some infected software that might steal more info then what you know.
They so call wanna protect you against that by not allowing rooted devices.
But as the past already showed us you can aswell get infected apps from market if it passes google filters.
So this is just marketing for AVG. Besides i think AVG is more insane then a virus uninstalling it from your device is not always working perfect.
Also it would become possible to detect if a phone is rooted or not. If google adds a tag when you are using a rooted phone and allows android to send that tag to sites/apps and those sites/apps read those tags and according to them give access or not well then we are screwed.
I don't think they will push it that far thought with the block rooted access.
They just did it now in an attempt to block pirating of their new movie service.
I also remember Google saying once in an article that rooting isn't forbidden and they won't block it as it is just a way to tweak your phone.
It just voids your warranty
its always somethin isnt it..
Sorry if I sound dumb, but what exactly have Google blocked on rooted devices aside from video rentals?
Atomix86 said:
Sorry if I sound dumb, but what exactly have Google blocked on rooted devices aside from video rentals?
Click to expand...
Click to collapse
Well except the movies they havn't blocked rooted phones from anything else yet
For now i don't mind the block that much since i don't plan to view movies on my phone but i understand allot of other users that are pissed at this.
I mean my phone also has to Voodoo sound control app installed so yeah it needs root for that.
Things like this remind me of the phrase I say that "a phone is only as good as it is unrooted" in case one day our rooted phones are cut off from the world.
I am not, but if I had to guess I'd say: If Google decides to block more/too many services on rooted phones we are going to see an "root cloaking app" or something like that, pretending the phone was not rooted while it is.
On Topic, as a computer science student with focus on security: Yes, rooted phones are more vulnerable, because malicous apps could gain root from a stupid user or a dumb user install warez/cracks/stolen stuff with virii in them. Thinking about prices for most apps it's such a users own fault if his data is in trouble.
A bigger problem are the actual security holes in the system. I know from my old iPhone that those are the biggest problem. Especially if those can be triggered from a website, like the pdf or tiff exploit (the later still present on iPhone 3G as firmware is no longer updated).
Oh, on that note, I have a nice topic, but I think I should start a new one instead...
kllrnohj said:
Don't worry, there is no way for a website to detect if you are rooted or not. There's also no reason for financial companies to do that - they would piss off users for zero gain in security.
Uh, what? Google has *only* shipped devices with root capability so far, what is this "unsupported" crap?
Click to expand...
Click to collapse
Not really. From what I understand, to gain root in a device, you have to find a way to exploit it. There is no bonafide root access from Google. The Evo 4G, for example, the exploit was found in the Flash Lite app.
http://forum.xda-developers.com/showpost.php?p=15664846&postcount=3
im rooted
Root is nothing more than admin privileges. Look at your desk top is it "rooted" and do you think they will deny your money from and an admin account on your desktop? Take a deep breath and calm down.
root or not, security problem always occur
I don't know
JDenson77 said:
Root is nothing more than admin privileges. Look at your desk top is it "rooted" and do you think they will deny your money from and an admin account on your desktop? Take a deep breath and calm down.
Click to expand...
Click to collapse
i am rooted too.. and it's for the same reason i wouldn't like using a computer as a pathetic "user"..
Those 'Security Experts' are government agents that don't know sh#t about high tech rooted devices!
Better Security
I am running the MIUI ROM and I think the security features are much better than the non rooted ROM. It actually asked me if I wanted the XBMC app to intercept SMS's.

Massive Android malware op may have infected 5 million users

http://www.computerworld.com/s/arti..._malware_op_may_have_infected_5_million_users
Computerworld - The largest-ever Android malware campaign may have duped as many as 5 million users into downloading infected apps from Google's Android Market, Symantec said today.
Dubbed "Android.Counterclank" by Symantec, the malware was packaged in 13 different apps from three different publishers, with titles ranging from "Sexy Girls Puzzle" to "Counter Strike Ground Force." Many of the infected apps were still available on the Android Market as of 3 p.m. ET Friday.
Edit:Credit for this goes to Gio from The Collective.
Thanks for heads up Tx!
Sent from my HTC Vivid using XDA app
Some say the Android Market isn't safe, but the problem are the users themselves, people just download any app from the Market thinking they are safe...
it's just like going tho the supermarket and not looking at expiration dates in food, then going home and getting diarrhea because you ate something rotten. hahaha
And that's only from the Android Market, imagine the people who install hacked apps and stuf..
mateusm said:
Some say the Android Market isn't safe, but the problem are the users themselves, people just download any app from the Market thinking they are safe...
it's just like going tho the supermarket and not looking at expiration dates in food, then going home and getting diarrhea because you ate something rotten. hahaha
And that's only from the Android Market, imagine the people who install hacked apps and stuf..
Click to expand...
Click to collapse
I think that Google should do a better job of scanning/screening apps before they're released for mass consumption. This should be the first line of defense, but as you stated, it ultimately comes down to the end user being smart about what they install.
Agreed. It all comes back to why we get irritated at some new users posting when they have a problem and post before looking for the answer.......they dont want to read. Good practice would be to read the reviews before downloading.
Sent from my HTC Vivid using XDA app
http://www.noticeorange.com/StoryBo...RpY2VvcmFuZ2VyDQsSBFNpdGUY2pTyFww&font_size=9
Maybe premature
Sent from my CM7 Nightly HTC Desire HD
That ****ing sucks. There's always an asshole out there trying to **** **** up.
bluizzo said:
http://www.noticeorange.com/StoryBo...RpY2VvcmFuZ2VyDQsSBFNpdGUY2pTyFww&font_size=9
Maybe premature
Sent from my CM7 Nightly HTC Desire HD
Click to expand...
Click to collapse
Well I don't know where Lookout gets their information about not calling it malware but according to wikipedia
Malware, short for malicious software, is software (or script or code) designed to disrupt computer operation, gather sensitive information, or gain unauthorized access to computer systems. It is a general term used to describe any kind of software or code specifically designed to exploit a computer, or the data it contains, without consent.[1] The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software.
Click to expand...
Click to collapse
But that sounds exactly like what this software is. And I have seen it before on my phone. It doesn't matter how careful you are even if you do read the reviews on the market. I had a free game called Bocce Ball. It had great reviews. Had it for many months. Then one day it wouldn't work unless I updated it. Low and behold I had notifications pushed to my notification bar, my homepage was hijacked, and I had search icons on my homescreen.
There lies why apple may be superior and I hate to admit it. It actually is in control of everything that gets posted on it's market. And with the variety of OS versions out there for android, Android is starting to look like Windows more and more everyday.
People will download anything these days..
Sent from my Inspire 4G CM7 using Tapatalk
psych0naut said:
That ****ing sucks. There's always an asshole out there trying to **** **** up.
Click to expand...
Click to collapse
This is your one and only warning. That type of language has no place here.
Now to remain on topic. Things like this will always happen. Same with PC. If you are not careful then you get a virus. Learn to be careful and your good.
suggestions? use avg?
willwoodham0526 said:
suggestions? use avg?
Click to expand...
Click to collapse
Best advice is use common sense. Read all permissions before installing and only install apps from the official marketplaces. Anti virus software really are pointless.!
I use webroot secure anywhere, it works very well.
jimcasey1768 said:
I use webroot secure anywhere, it works very well.
Click to expand...
Click to collapse
And how did you come to that conclusion? Did it actually catch something? Or the fact that it didn't you presume you are clean?
Tx Redneck said:
... the malware was packaged ... with titles ranging from "Sexy Girls Puzzle" to "Counter Strike Ground Force."
Click to expand...
Click to collapse
Gee. I wonder who their target audience is. Oversexed, impulsive teenage to twenty-something boys, perhaps?
Yeah, if you ask me, "Sexy Girls Puzzle" just screams malware.
that sucks man, thank you for the warning!

Major uptick in Android Malware

I don't know how many of you pay attention to security issues but I thought I would post a link to this Threatpost article.
http://threatpost.com/en_us/blogs/staggering-increase-android-malware-variants-trojan-apps-051612
It behooves one to pay attention to what you are installing and what permissions apps are requesting. I just ditched Evernote due to increased permissions, even though it is from what one might call a trusted source.
Edit: I have not finished perusing the F-Secure Mobile Threat Report, but so far it is a good read.
I've never once had a problem with any kind of malware or virus on my phone. Then again I'm careful and use common sense. Which goes a long way
Sent from my SGH-I777 using xda premium
Phalanx7621 said:
I've never once had a problem with any kind of malware or virus on my phone. Then again I'm careful and use common sense. Which goes a long way
Click to expand...
Click to collapse
Common sense does go a long way. With some of the posts I've seen on XDA, there seems to be a lack of that not-so-common attribute. Flashing without thinking, sideloading apps from unknown sources, etc.
Google appears to be reacting (albeit slowly) with Bouncer, trying to police Market/Play. I'm not sure if Amazon is doing anything similar for their app store. The big picture still looks rather grim. Will we be looking at large scale botnets this year? Hopefully not. The idea of Android botnets makes me a bit ill.
Unless malware can show up on the store, I don't see the issue here. It's a risk we've all known about since the day Android came out.
alpha-niner64 said:
Unless malware can show up on the store, I don't see the issue here. It's a risk we've all known about since the day Android came out.
Click to expand...
Click to collapse
Malware has shown up on the store. The issue is that Android is increasing its market share by leaps and bounds, black hats are writing more sophisticated malware, and more people are hacking their devices without a clue as to what they are doing. If you read the F-Secure Mobile Threat Report (linked in Threatpost), the number of detected malware APK's has grown tenfold over the last year.
Golly gosh.
Sent from my GT-I9100 using XDA
Phalanx7621 said:
I've never once had a problem with any kind of malware or virus on my phone. Then again I'm careful and use common sense. Which goes a long way
Sent from my SGH-I777 using xda premium
Click to expand...
Click to collapse
Exactly the same here
Windows has had malware threats for well over a decade and as it matured the OS was patched to deal with it. Android is more secure than Windows is, you not only have to download a malicious app you also have to install it before anything bad can happen.
Google will hopefully implement a more effective way of preventing malware from entering the Play Store but this may have the side effect of false positives on certain rooting/tweaking apps.
As pc are being replaced by tablets, its a juicy business for anti virus companies.
So i wouldn't trust any report from av companies...
It's usually pretty vague. Which app on android market?
As you get virus when you install warez games on pc, the same goes for android if you manually install an apk out of android market. Nothing new.
rchtk said:
As pc are being replaced by tablets, its a juicy business for anti virus companies.
So i wouldn't trust any report from av companies...
It's usually pretty vague. Which app on android market?
As you get virus when you install warez games on pc, the same goes for android if you manually install an apk out of android market. Nothing new.
Click to expand...
Click to collapse
I think you guys are missing the OP's point. You dont have to manually install an .apk.
A fake company called "MYOURNET" (touche for the name, rather ironic now) took a bunch of real apps from the market, injected them with malware and resubmitted them back onto the marketplace. The new malware could root your phone, steal your data, and keep a backdoor open for more goodies. Crazy ****.
http://androidcommunity.com/android-virus-served-up-by-user-myournet-20110302/
I admi i didn't open the pdf (pdf is now the number one virus vector ;-) but as far as i see it didn't mention reinjection in the market. Well.. pay attention to permissions..
Nothing else to do.
How to define a virus? That is the question..
Only install trusted editor from the market. Only install applications which provide ttheir source code and read it..
Easy answer for malware pike: piracy, period

Categories

Resources