Database Info

Evil Android

There’s a new threat in town. And by town, I mean China. Malware authors have created a bit of code called Geinimi that hitchhikes on existing apps when they are redistributed on third-party markets. At the moment it doesn’t do much but lurk, but its capabilities resemble that of a botnet server, according to Lookout, a company that makes antivirus software for Android.
So far the code has been identified as being able to send out your location, IMEI, app list, and to download apps. There could be more. Users outside of China are apparently at little risk, and at any rate your security is in your own hands: if you’re downloading a to-do list app and it wants access to your GPS and calling functions, that’s probably bogus.
Stay safe out there, kids.
Not to sure if this has been posted or not.

This is very disturbing...anything to get info on people..

I don't install antiviruses on my phone,because android is based on linux, and linux doesn't have viruses because of the strong kernel, plus its semi possible that you will have a virus on your phone.:thumbup:
Sent from my GT-S5660 using xda premium

Octane70 said:
There’s a new threat in town. And by town, I mean China. Malware authors have created a bit of code called Geinimi that hitchhikes on existing apps when they are redistributed on third-party markets. At the moment it doesn’t do much but lurk, but its capabilities resemble that of a botnet server, according to Lookout, a company that makes antivirus software for Android.
So far the code has been identified as being able to send out your location, IMEI, app list, and to download apps. There could be more. Users outside of China are apparently at little risk, and at any rate your security is in your own hands: if you’re downloading a to-do list app and it wants access to your GPS and calling functions, that’s probably bogus.
Stay safe out there, kids.
Not to sure if this has been posted or not.
Click to expand...
Click to collapse
Its not a new threat, lookouts announcement of it was in 2010 and in 2011 it was picked up by more press but is actually a two year old threat which afaik never did cause any problems but is checked for by google and therefore probably other app distributors.
Dave
( http://www.google.com/producer/editions/CAownKXmAQ/bigfatuniverse )
Sent from my LG P920 using Tapatalk

I hear Android 5 (JellyBean) includes some kind of in-built malware protection.
Gotta wonder why...
Sent from my unrooted DroidX using Tapatalk

Nate2 said:
I hear Android 5 (JellyBean) includes some kind of in-built malware protection.
Gotta wonder why...
Sent from my unrooted DroidX using Tapatalk
Click to expand...
Click to collapse
Not heard that, would be surprised if it did as google use bouncer to combat the malware problem.
Dave
( http://www.google.com/producer/editions/CAownKXmAQ/bigfatuniverse )
Sent from my LG P920 using Tapatalk

Pancakes_Gio said:
I don't install antiviruses on my phone,because android is based on linux, and linux doesn't have viruses because of the strong kernel, plus its semi possible that you will have a virus on your phone.:thumbup:
Sent from my GT-S5660 using xda premium
Click to expand...
Click to collapse
Wrong in many ways, it doesn't have viruses because the market is next to non-existent and getting a virus on an android device is more and more common.

Welp, as they say. Only install from trusted sources and always check the permissions the apps ask for. If you don't want the risk, go buy an Apple product and play by their rules. These are the risks that open-source brings and one that all of us bears in mind when tinkering with such power.

z33dev33l said:
Wrong in many ways, it doesn't have viruses because the market is next to non-existent and getting a virus on an android device is more and more common.
Click to expand...
Click to collapse
Actually linux does have them, see http://en.m.wikipedia.org/wiki/Linux_malware for some examples.
Linux has few simply because it tends to get patched quicker. Malware on android devices will increase more this year as its the most used mobile os and so offers more potential victims which makes it a more enticing prospect for hackers.
Dave
( http://www.google.com/producer/editions/CAownKXmAQ/bigfatuniverse )
Sent from my LG P920 using Tapatalk

That and there's no real security built-in to android and it's the easiest one to pirate apps on. I personally believe the people trying to get the apps free deserve the viruses though. Does the patching have to do with the Linux distro or the kernel? Serious question as I know little about Linux malware and only briefly used Linux.

i know kernels get patched, i think distros do as well.

alpha-niner64 said:
If you don't want the risk, go buy an Apple product
Click to expand...
Click to collapse
You're joking, right? TLDR: How do you think jailbreaking is possible if Apple is so secure? Indeed, it's the false confidence that comes from them telling users that it's so secure that's precipitated so many of the blunders.

z33dev33l said:
That and there's no real security built-in to android and it's the easiest one to pirate apps on. I personally believe the people trying to get the apps free deserve the viruses though. Does the patching have to do with the Linux distro or the kernel? Serious question as I know little about Linux malware and only briefly used Linux.
Click to expand...
Click to collapse
Kernel gets updated with patches but individual distributions also get system patches or did a few years ago when I last used linux.
I'm curious why you think there's no security built into android, as can be seen at http://developer.android.com/guide/topics/security/security.html there are a number of security measures in place.
Dave
( http://www.google.com/producer/editions/CAownKXmAQ/bigfatuniverse )
Sent from my LG P920 using Tapatalk

Use your brain for security
All the android malware reports I have ever read are just scare tactics used by various news agencys, blogs, etc to generate more views for their site. Almost all android malware can be avoided by simply being smart with where and what you download. Using iOS doesn't make you safe; downloading well known apps from the play store that only use permissions that are appropriate for its described functionality makes you safe.

z33dev33l said:
That and there's no real security built-in to android and it's the easiest one to pirate apps on. I personally believe the people trying to get the apps free deserve the viruses though.
Click to expand...
Click to collapse
I agree 120% with you, cheating people's hard work will get you burnt!
Sent from my HTC Wildfire S A510b using xda premium

Ashmere69 said:
I agree 120% with you, cheating people's hard work will get you burnt!
Sent from my HTC Wildfire S A510b using xda premium
Click to expand...
Click to collapse
Exactly. Buy the app and you don't have to worry about it. Besides, it's not like these apps are fifty bucks each. Pay a couple of dollars and support the ecosyste

I think some of the real culprits to an evil Android is self-awareness on the handset, they always seem to delete and corrupt your stuff before you know it, but yeah, bootlegs are not good at all.

Octane70 said:
There’s a new threat in town. And by town, I mean China. Malware authors have created a bit of code called Geinimi that hitchhikes on existing apps when they are redistributed on third-party markets. At the moment it doesn’t do much but lurk, but its capabilities resemble that of a botnet server, according to Lookout, a company that makes antivirus software for Android.
So far the code has been identified as being able to send out your location, IMEI, app list, and to download apps. There could be more. Users outside of China are apparently at little risk, and at any rate your security is in your own hands: if you’re downloading a to-do list app and it wants access to your GPS and calling functions, that’s probably bogus.
Stay safe out there, kids.
Not to sure if this has been posted or not.
Click to expand...
Click to collapse
Eek!

iPhone doesn't have this problem...

L33t Masta said:
iPhone doesn't have this problem...
Click to expand...
Click to collapse
Think again.
Sent from my Inspire 4G using Tapatalk 2

Best antivirus for galaxy tab

Hi guys
i just read about trojan attack on android phones and hence i am planning to install antivirus software.
Could you please guide which is the best antivirus for galaxy tab which should not be very resource hungry.
Thanks in advance
Sent from my GT-P1000 using XDA App

I use look out
Sent from my SGH-T849 using Tapatalk

pda_crazy said:
Hi guys
i just read about trojan attack on android phones and hence i am planning to install antivirus software.
Click to expand...
Click to collapse
A report that was released by a company selling anti-virus products for Android. A report that has since been attacked for its credibility, as it seems the "trojan" may simply have been a legitimate (if intrusive) reporting mechanism used by the Chinese store selling those apps.
Bottom line: If you don't side-load content, you simply do not need anti virus on Android. It's a waste of time, money, processing power and battery life. I'm not aware of any known exploits on the Android ecosystem that don't require the user to side-load malware from sources outside the official Android market.
Android isn't windows. Android is a secure architecture from the ground up. Android doesn't have OS holes that need plugging. Android doesn't offer itself up to be infected every time an email is received.
If you're really worried about viruses, simply don't install apps from anywhere except the official Android market. Doing this single thing will do far more to guarantee safety than any anti-virus software.
Now if you do side-load content from questionable sources, an anti-virus product could potentially provide protection. In the real word, anti-virus software rarely recognizes new, zero day exploits. so not all that much protection at all.

After hearing such good things about android i am feeling proud to be android owner.
Sent from my GT-P1000 using XDA App

Do we really need an Antivirus on the Galaxy Tab?

Better safe than sorry especially since there is no rejection poilicy for the market
Sent from my GT-P1000 using XDA App

i think your better served reading the permissions of apps installed.
Things like Applanet that ask for access to log in credentials are far more dangerous then malware.
That is as long as your not getting your apps from chinese markets.

NetQin Android Antivirus
pda_crazy said:
Hi guys
i just read about trojan attack on android phones and hence i am planning to install antivirus software.
Could you please guide which is the best antivirus for galaxy tab which should not be very resource hungry.
Thanks in advance
Sent from my GT-P1000 using XDA App
Click to expand...
Click to collapse
NetQin Android Antivirus, works fine!

TainT said:
i think your better served reading the permissions of apps installed.
Things like Applanet that ask for access to log in credentials are far more dangerous then malware.
That is as long as your not getting your apps from chinese markets.
Click to expand...
Click to collapse
This.
Antivirus apps are not required. These "reports" are from antivirus creators designed to make you think you need one.
Actually read the reports? They are not viruses, but simply permissions you give it when installing anyway.

I wouldn't have thought antivirus was required, especially given Android's base as a Linux. All it would do is waste CPU cycles.

Spent the last 5 years as a Symbian user listening to people claim that AV on the phones was a 'must have'.
Glad to see some things are the same on Android!

A Trojan Horse on Android/Linux is like an upper class chav, it's not going to happen.
Sent from my GT-P1000

EStrong Security manager isn't an antivirus per se but it seems to do a manual scan for malicious apps. They're very vague as to what it actually does though.

I don't really understand why people feel the need to get anti-virus for linux. To get something malicious you've got to install it yourself and thats pretty damn hard considering the phone will tell you what the app is tring to access and even then the app doesn't have any access to any other apps nor does it have root access to the phones file system.... the most it could really do is collect data about you, or maybe delete files on your SD card or something like that.

there is some very naive linux fanboys in here. there is plenty of reasons to have some sort of malware/privacy security on android. there have been various independant confirmations of apps in the market place containing malware espesially in the last month or so.
lookout is a good one or kaspersky. the both have good scanners and also can protect personal info aswell.

TheATHEiST said:
there is some very naive linux fanboys in here. there is plenty of reasons to have some sort of malware/privacy security on android. there have been various independant confirmations of apps in the market place containing malware espesially in the last month or so.
lookout is a good one or kaspersky. the both have good scanners and also can protect personal info aswell.
Click to expand...
Click to collapse
I would think that since the last reply was from January, people would have learnt that.. The last malware incident that got Google involved within 5 minutes and had over 50 apps pulled was pretty well publicized.
Anyway, people have got to realize that no one OS is invulnerable. It's just a matter of time before people start finding exploits when an OS gets popular - for Android that time is now. Heck, not sure how many people are aware, but roots and jailbreaks ARE exploits themselves. Trying scanning the rooting/jailbreaking tools with your desktop AV and all becomes clear.

darkwoof said:
Heck, not sure how many people are aware, but roots and jailbreaks ARE exploits themselves. Trying scanning the rooting/jailbreaking tools with your desktop AV and all becomes clear.
Click to expand...
Click to collapse
Precisely. A rooted device is the best to attack for malware apps. If there's a developer that's smart enough, they can get pretty much anything if you're rooted.
Sent from my GT-P1000 using XDA Premium App

Since I'm rooted, I installed Lookout too.
Funny coz it's easily uninstalled eventhough has apps policy/administrator (I forgot the name)
Well.. I use it mainly for the Missing Device feature (paired with PREY also).

GANJDROID said:
Precisely. A rooted device is the best to attack for malware apps. If there's a developer that's smart enough, they can get pretty much anything if you're rooted.
Sent from my GT-P1000 using XDA Premium App
Click to expand...
Click to collapse
dude you did not understand the last post at all!
you dont need to have your device rooted. a normal market app can root your device without you knowing it, and can then do whatever with your device.
how do you think z4root does root your device? (z4root is an app that does root the phone for you, normally with your knowledge)

Geletis said:
A report that was released by a company selling anti-virus products for Android. A report that has since been attacked for its credibility, as it seems the "trojan" may simply have been a legitimate (if intrusive) reporting mechanism used by the Chinese store selling those apps.
Bottom line: If you don't side-load content, you simply do not need anti virus on Android. It's a waste of time, money, processing power and battery life. I'm not aware of any known exploits on the Android ecosystem that don't require the user to side-load malware from sources outside the official Android market.
Android isn't windows. Android is a secure architecture from the ground up. Android doesn't have OS holes that need plugging. Android doesn't offer itself up to be infected every time an email is received.
If you're really worried about viruses, simply don't install apps from anywhere except the official Android market. Doing this single thing will do far more to guarantee safety than any anti-virus software.
Now if you do side-load content from questionable sources, an anti-virus product could potentially provide protection. In the real word, anti-virus software rarely recognizes new, zero day exploits. so not all that much protection at all.
Click to expand...
Click to collapse
Dude, You have absolutely no clue what you are talking about. MANY malware have been discovered as been submitted and released via market.
http://pocketnow.com/android/google-removes-ten-malware-infected-apps-from-android-market

Virus

Hi,
Just to ask about anty virus,,which one is good ?
Tnx
Sent from my Transformer TF101 using xda premium

trust me, you don't want antivirus on this thing. They do more harm then good... but if you insist, then AVG has an antivirus suite (the pro version costs, like, 10 usd). Like I was saying though, save your money and just be wise when you are exploring the market/installing apps. One rule to follow is if it looks too good to be true... it probably is.

The only security software I would pay for my Android devices it's for a Firewall, I'd love to block some apps. from connecting to the internet.
For AV, Dyskmaster said enough - for Android, the best AV it's the user good sense.

Try out Zoner Antivirus. It's the only free AV that works. The others are useless. For paid AV, get Kaspersky.
More info - http://www.av-test.org/fileadmin/pdf/avtest_2011-11_free_android_virus_scanner_english.pdf

The way android built, kinda hard for a virus to linger in it.
Just try to imagine this. Windows is like lasagna. Too many places for a little bug to hide. You can't really dig into it to find a little insect without destroying the dish.
Android is like ravioli. You have an app misbehaving? Just pick it out of your plate and throw it out.

goodintentions said:
The way android built, kinda hard for a virus to linger in it.
Just try to imagine this. Windows is like lasagna. Too many places for a little bug to hide. You can't really dig into it to find a little insect without destroying the dish.
Android is like ravioli. You have an app misbehaving? Just pick it out of your plate and throw it out.
Click to expand...
Click to collapse
nice analogy, but I wonder what that makes osx? I would have to say soup because apple will just say that the bug is in there to add "flavour". (osx is very insecure however, most people won't even think about it because "macs cant get viruses" but anyway... nowadays, most all viruses propagate not because of flaws in a system, but because of flaws in the people who run the system.

You may find this useful when deciding
http://www.theregister.co.uk/2011/11/14/android_anti_virus/

Thank you guys!
Sent from my GT-I9100 using XDA App

Android doesn't really need Anti-virus, thats a myth spread by Apple.

Granted, but as long as there are AV packages out there, people will ask about them.

Android.Counterclank infecting 5 million users ?

A massive Android malware campaign may be responsible for duping as many as 5 million users into downloading the Android.Counterclan infection from the Google Android Market.
A list of infected Apps here

Now the question would be to have a antivirus ! With all the Mods and root access..
Which one would the XDA community suggest ?

Turns out they were wrong...
http://m.computerworld.com/s/article/9223786/Lookout_Security_rebuts_rival_s_Android_malware_claims
Dave
Sent from my LG P920 using Tapatalk

tyroavi said:
Now the question would be to have a antivirus ! With all the Mods and root access..
Which one would the XDA community suggest ?
Click to expand...
Click to collapse
NO!!!!!
As of windows7 the antivirus market for the PC has dropped, as windows now offers FREE antivirus for their system... So now antivirus companies need another lucrative market and they have been aiming at android ,using a very aggressive FUD campaign to boost their sales, and catch the unsuspecting and unknowing user in their trap.... In the end (and some hate hearing this ) its up to you.... from the list provided, it is my opinion that IF these were Trojans (and they are NOT.. the guy before me has a link that says they are not ) ,THEN any one who did download these would deserve the end results .... but such is not the case ...
In the end, the best advice is this
1... watch what you download ...
2... don't get trapped by antivirus companies FUD schemes ...

dan0zone said:
NO!!!!!
As of windows7 the antivirus market for the PC has dropped, as windows now offers FREE antivirus for their system... So now antivirus companies need another lucrative market and they have been aiming at android ,using a very aggressive FUD campaign to boost their sales, and catch the unsuspecting and unknowing user in their trap.... In the end (and some hate hearing this ) its up to you.... from the list provided, it is my opinion that IF these were Trojans (and they are NOT.. the guy before me has a link that says they are not ) ,THEN any one who did download these would deserve the end results .... but such is not the case ...
In the end, the best advice is this
1... watch what you download ...
2... don't get trapped by antivirus companies FUD schemes ...
Click to expand...
Click to collapse
Antivirus apps can be helpful in guarding against malware by checking if apps are sending your data out etc but your right that as of new windows antivirus companies are going to really push whatever big customer market they can with scare tactics, that market is android because its big and has many users who can be easily persuaded with such stories.
To their credit lookout turned round and showed symantec were simply including add supported apps. As many apps use ads if you claim them as viruses then you get a huge amount of "infected" systems that in reality are not infected with anything.
Dave
Sent from my LG P920 using Tapatalk

Seems like a conspiracy to me the more I dwell into it..
Only afraid of the root access that my phone has now... Sigh
Sent from my HTC Desire HD with Beats Audio using XDA App

tyroavi said:
Seems like a conspiracy to me the more I dwell into it..
Only afraid of the root access that my phone has now... Sigh
Sent from my HTC Desire HD with Beats Audio using XDA App
Click to expand...
Click to collapse
Well the super user app is your best friend for now, till they figure out a way to bypass it ...... Again paying attention to what download on your unit is very important.....
ALSO if you grown up enough to have, as they say, 'all my important info on my phone', then you should be grown up enough to know that if you download an app called sexy girls puzzles, for FREE, there might be a possibility that it may contain something that, might be a danger to my important info .... This is just my opinion .......!

There was a test about antivirus solutions in november:
hXXp://XXX.av-test.org/fileadmin/pdf/avtest_2011-11_free_android_virus_scanner_english.pdf

Major uptick in Android Malware

I don't know how many of you pay attention to security issues but I thought I would post a link to this Threatpost article.
http://threatpost.com/en_us/blogs/staggering-increase-android-malware-variants-trojan-apps-051612
It behooves one to pay attention to what you are installing and what permissions apps are requesting. I just ditched Evernote due to increased permissions, even though it is from what one might call a trusted source.
Edit: I have not finished perusing the F-Secure Mobile Threat Report, but so far it is a good read.

I've never once had a problem with any kind of malware or virus on my phone. Then again I'm careful and use common sense. Which goes a long way
Sent from my SGH-I777 using xda premium

Phalanx7621 said:
I've never once had a problem with any kind of malware or virus on my phone. Then again I'm careful and use common sense. Which goes a long way
Click to expand...
Click to collapse
Common sense does go a long way. With some of the posts I've seen on XDA, there seems to be a lack of that not-so-common attribute. Flashing without thinking, sideloading apps from unknown sources, etc.
Google appears to be reacting (albeit slowly) with Bouncer, trying to police Market/Play. I'm not sure if Amazon is doing anything similar for their app store. The big picture still looks rather grim. Will we be looking at large scale botnets this year? Hopefully not. The idea of Android botnets makes me a bit ill.

Unless malware can show up on the store, I don't see the issue here. It's a risk we've all known about since the day Android came out.

alpha-niner64 said:
Unless malware can show up on the store, I don't see the issue here. It's a risk we've all known about since the day Android came out.
Click to expand...
Click to collapse
Malware has shown up on the store. The issue is that Android is increasing its market share by leaps and bounds, black hats are writing more sophisticated malware, and more people are hacking their devices without a clue as to what they are doing. If you read the F-Secure Mobile Threat Report (linked in Threatpost), the number of detected malware APK's has grown tenfold over the last year.

Golly gosh.
Sent from my GT-I9100 using XDA

Phalanx7621 said:
I've never once had a problem with any kind of malware or virus on my phone. Then again I'm careful and use common sense. Which goes a long way
Sent from my SGH-I777 using xda premium
Click to expand...
Click to collapse
Exactly the same here

Windows has had malware threats for well over a decade and as it matured the OS was patched to deal with it. Android is more secure than Windows is, you not only have to download a malicious app you also have to install it before anything bad can happen.
Google will hopefully implement a more effective way of preventing malware from entering the Play Store but this may have the side effect of false positives on certain rooting/tweaking apps.

As pc are being replaced by tablets, its a juicy business for anti virus companies.
So i wouldn't trust any report from av companies...
It's usually pretty vague. Which app on android market?
As you get virus when you install warez games on pc, the same goes for android if you manually install an apk out of android market. Nothing new.

rchtk said:
As pc are being replaced by tablets, its a juicy business for anti virus companies.
So i wouldn't trust any report from av companies...
It's usually pretty vague. Which app on android market?
As you get virus when you install warez games on pc, the same goes for android if you manually install an apk out of android market. Nothing new.
Click to expand...
Click to collapse
I think you guys are missing the OP's point. You dont have to manually install an .apk.
A fake company called "MYOURNET" (touche for the name, rather ironic now) took a bunch of real apps from the market, injected them with malware and resubmitted them back onto the marketplace. The new malware could root your phone, steal your data, and keep a backdoor open for more goodies. Crazy ****.
http://androidcommunity.com/android-virus-served-up-by-user-myournet-20110302/

I admi i didn't open the pdf (pdf is now the number one virus vector ;-) but as far as i see it didn't mention reinjection in the market. Well.. pay attention to permissions..
Nothing else to do.
How to define a virus? That is the question..
Only install trusted editor from the market. Only install applications which provide ttheir source code and read it..

Easy answer for malware pike: piracy, period