ICT Security-Sécurité PC et Internet

The vulnerability could allow attackers to intercept traffic from Android devices despite an active VPN connection

A vulnerability in Android allows malicious applications to bypass an active VPN (virtual private network) connection and force traffic from the device through an attacker-controlled system where it can be intercepted, according to security researchers from Ben-Gurion University of the Negev in Israel.

By Nathan Collier We have found a new threat we are calling Android.TechnoReaper. This malware has two parts: a downloader available on the Google Play Market and the spyware app it downloads. The ...

Lookout Mobile Security has identified hacked websites targeting Android devices, an attack vector previously only used to infect PCs with malware.

 

Read more...

 

Is Your Phone Is Infected?Here's How to Tell...

 

I don't think it's far-fetched to say that most people have no idea if their mobile devices have been infected with malware, simply because they don't think mobile malware even exists (call it the Mac syndrome?).

 

No Excuse for No Antivirus

The only way to confirm your suspicions is to install an antivirus app. There are lots of free, fast, non-intrusive mobile antivirus solutions out there. Lookout for Android is our Editors' Choice for Android security, but other high-performing malware detectors include F-Secure Mobile Security 7.6 and McAfee Mobile Security 2.0.

 

===> All have free versions that include a quick malware scan.<===

 

 

 

AV-TEST GmbH -

===> The Independent IT-Security Institute... <===

 

Over the past year, the popularity of the Android system has led to a huge increase in the distribution of Android malware (see fig. 1).

 

This malware is mainly distributed in markets operated by third parties, but even the Google Android Market cannot guarantee that all of its listed applications do not contain any threats.

 

===> Users should no longer blindly trust all apps. <===

 

A large range of protection programmes that can help to identify dangerous apps and remove them from a user's device are now available.

We've recently found a vulnerability in certain Android apps that may leave user data at risk of being captured or being used to launch attacks.

A new trojan for Android has been discovered that resides in the memory of infected devices and launches itself early on in the OS loading stage. Even if some elements of the threat ...

Kaspersky uncovers trojan spread by "spear-phish" to Tibet activists.

 

Malware used to spy on Tibetan activists and other ethnic groups in China is nothing new. But a new Trojan discovered by researchers at Kaspersky Labs has widened the scope of this digital espionage and intimidation. The malware uses a combination of e-mail hacking, "spear phishing," and a Trojan built specifically for Android smartphones.

===> Kaspersky claims this is the first discovery of a targeted attack that uses mobile phone malware. <===

DFI News Digital Forensic Investigator is a multi-media resource for digital forensic professionals working in academic, government, law enforcement, and corporate settings.

 

Call it Invasion of the iPhone Snatchers: a new FinFisher-based spyware is built to infect iPhones and iPads (and Android, BlackBerry and Windows Phone gadgets too) in order to take over the device completely — all unbeknownst to the user.

 

The smartphones and tablets will innocently appear to be themselves, but in reality the mobile malware is working in the background to track the device’s location, monitor activity and intercept communications including emails, voice calls and text messages.

 

Read more:

http://www.dfinews.com/news/spyware-takes-over-iphones-androids?et_cid=2825646&amp;et_rid=454853272&amp;linkid=http%3A%2F%2Fwww.dfinews.com%2Fnews%2Fspyware-takes-over-iphones-androids#.UEDceehnFCE.twitter

 

Downloading apps from Google Play, the official online Android app market, is not without its dangers.

 

Even though Google has been scanning the offered apps for malware by using "Bouncer" - an automated app scanning service that should, in theory, detect malicious software and developers who keep offering it - there are still instances where they aren't booted out of the market soon enough.

 

Security researchers from AegisLab have recently discovered over 15 fake AV and "free SMS" apps being offered by the same developer ("thasnimola") that has been flagged for selling fake NQ Mobile apps in April.

 

Read more and be aware...

 

Researchers at NQ Mobile, working alongside researchers at North Carolina State University, have discovered Android malware that is controlled via SMS that can do a number of things on the compromised device including recording calls and and surrounding noise.

 

Experts from a cyber security firm, CrowdStrike, have reportedly discovered a flaw in a component of smartphones powered by Google's Android OS. Apparently, this flaw can allow hackers to gain control of these devices.

A Reuters reports says CrowdStrike will demonstrate their findings at a major computer security conference to be held in San Francisco next week....