 Your new post is loading...
Your new post is loading...
Scoop.it!
The existence of another “master key” bug that can be used to push malware onto Android users has been publicly disclosed by Jay Freeman (a....
Gust MEES's insight:
Scoop.it!
Die NSA hat laut einem Medienbericht Arbeitsgruppen für jedes große mobile Betriebssystem. Die Angreifer können Kontaktlisten, SMS, E-Mail und Aufenthaltsorte auslesen.
Gust MEES's insight:
Scoop.it!
Pour un conférencier de la Defcon 21, la fonctionnalité "weblogin" serait corruptible, et pas qu'un peu : tout un système applicatif pourrait être compromis en exploitant la bonne faille.
Gust MEES's insight:
Scoop.it!
Auf 75 Prozent aller Android-Geräte werkelt von der NSA entwickelter Code. Während die Behörde beteuert, damit nur die Sicherheit des mobilen Betriebssystems verbessern zu wollen, wittern Kritiker bereits einen neuen Schnüffel-Skandal.
Scoop.it!
Security researchers have discovered a vulnerability that could allow attackers to take full control of most Android smartphones
The vulnerability allows hackers to modify an app without breaking its cryptographic signature, according to Jeff Forristal, chief technology officer (CTO) at mobile security firm Bluebox.
Via Gust MEES
Gust MEES's insight:
The vulnerability allows hackers to modify an app without breaking its cryptographic signature, according to Jeff Forristal, chief technology officer (CTO) at mobile security firm Bluebox.
Gust MEES's curator insight,
July 4, 2013 6:42 AM
The vulnerability allows hackers to modify an app without breaking its cryptographic signature, according to Jeff Forristal, chief technology officer (CTO) at mobile security firm Bluebox.
Gust MEES's curator insight,
July 4, 2013 6:45 AM
The vulnerability allows hackers to modify an app without breaking its cryptographic signature, according to Jeff Forristal, chief technology officer (CTO) at mobile security firm Bluebox. 
Zhao KQiang's curator insight,
March 27, 2014 6:52 AM
there is one example of smart phone security. focus on the mobile system Android
Scoop.it!
Kaspersky Labs claims Backdoor.AndroidOS.Obad.a is the most sophisticated piece of Android malware it has seen, and could signal a new era in Android threats.
But a newly detected Trojan targeting Google’s platform looks more like an advanced Windows virus than Android malware. It exploits multiple previously unknown vulnerabilities in the mobile OS, uses complex code obfuscation techniques, and blocks uninstall attempts.
Gust MEES's insight:
But a newly detected Trojan targeting Google’s platform looks more like an advanced Windows virus than Android malware. It exploits multiple previously unknown vulnerabilities in the mobile OS, uses complex code obfuscation techniques, and blocks uninstall attempts.
Learn more:
- http://gustmees.wordpress.com/2012/07/07/bring-your-own-device-advantages-dangers-and-risks/
Scoop.it!
Ein Sicherheitsforscher und Pilot hat auf einer Konferenz demonstriert, dass er mit einem Smartphone ein Passagierflugzeug unter seine Kontrolle bringen könnte. Dazu hat er eine spezielle App entwickelt.
Gust MEES's insight:
He claims the Federal Aviation Administration and the European Aviation Safety Administration are working on fixing the vulnerability.
It's amazing to discover that aviation - an industry where safety is of vital importance and every physical element has one or even two fail-safe mechanisms - is failing to secure the onboard computer, the heart and brain of the plane.
Check also:
- http://www.scoop.it/t/securite-pc-et-internet?tag=Airplane+Hijacking
Scoop.it!
An extremely well attended talk by Hugo Teso, a security consultant at n.runs AG in Germany, about the completely realistic scenario of plan...
It's amazing to discover that aviation - an industry where safety is of vital importance and every physical element has one or even two fail-safe mechanisms - is failing to secure the onboard computer, the heart and brain of the plane.
Gust MEES's insight:
It's amazing to discover that aviation - an industry where safety is of vital importance and every physical element has one or even two fail-safe mechanisms - is failing to secure the onboard computer, the heart and brain of the plane.
Check also:
- http://www.scoop.it/t/securite-pc-et-internet?tag=Airplane+Hijacking
Scoop.it!
Kaspersky uncovers trojan spread by "spear-phish" to Tibet activists.
Malware used to spy on Tibetan activists and other ethnic groups in China is nothing new. But a new Trojan discovered by researchers at Kaspersky Labs has widened the scope of this digital espionage and intimidation. The malware uses a combination of e-mail hacking, "spear phishing," and a Trojan built specifically for Android smartphones. ===> Kaspersky claims this is the first discovery of a targeted attack that uses mobile phone malware. <===
Gust MEES's insight:
Malware used to spy on Tibetan activists and other ethnic groups in China is nothing new. But a new Trojan discovered by researchers at Kaspersky Labs has widened the scope of this digital espionage and intimidation. The malware uses a combination of e-mail hacking, "spear phishing," and a Trojan built specifically for Android smartphones.
===> Kaspersky claims this is the first discovery of a targeted attack that uses mobile phone malware. <===
Scoop.it!
Secunia Releases Personal Software Inspector for Android
Gust MEES's insight:
Scoop.it!
Security researchers in China are warning Android users to be on their guard after claiming to have discovered a million-strong botnet lurking on the platform. The Android.Troj.mdk Trojan, first spotted by security firm Kingsoft Duba back in early 2011, is thought to be hidden in over 7,000 apps today, including many popular games such as Fishing Joy and Temple Run.
Gust MEES's insight:
===> BEWARE of the MALWARE!!! <===
Scoop.it!
Android is the mobile equivalent of Windows -- hugely popular and open to security threats such as malware. Here's how to keep safe.
Scoop.it!
Attackers have expanded their attacks beyond the Windows platform to include Mac OS X and Android. 27 Percent of All Cybercrime Linked to the ‘Blackhole’ Exploit Kit, Sophos said.
Even though the overall market share for Mac OS X remains small compared to other platforms, the number of Mac threats are growing as more users switch. Flashback, the malware that reportedly infected hundreds of thousands of Apple systems in April was the largest mass attack this year, but it's not the only Mac malware out there. In a typical week, SophosLabs detects 4,900 pieces of OS X malware on Mac computers.
===> In a snapshot of Mac malware detected over a one-week period in August, SophosLab detected various variants of fake antivirus, codecs and Flash player. <===
Read more, a MUST:
|
Scoop.it!
Das AV-Test Institut in Magdeburg hat 28 Schutzprogramme für Android-Geräte getestet. Bei der Zertifizierungsprüfung sind drei Apps wegen mangelhafter Schutzwirkung durchgefallen.
Scoop.it!
In late May we reported on the details of Backdoor.AndroidOS.Obad.a, the most sophisticated mobile Trojan to date. At the time we had almost no information about how this piece of malware gets onto mobile devices. Learn more: - http://www.scoop.it/t/securite-pc-et-internet/?tag=Botnet - http://www.scoop.it/t/securite-pc-et-internet/?tag=Mobile+Botnet
Scoop.it!
And the passwords are in plaintext, too. When you format an Android phone and set it up on first run, after you login to your Google account and restore your backup, it immediately connects to wifi using a saved password. There’s no sort of password hash that your Android phone could send your router to authenticate besides the password itself.
Oh, and Google is part of NSA’s Prism program. If an NSA analyst, or likely someone from CIA or even FBI (Prism is a “team sport”), asks Google for information about you, your house’s and office’s wifi passwords are likely included in that data. Without a warrant.
Scoop.it!
From
www
In Googles Mobilbetriebssystem Android ist eine Sicherheitslücke entdeckt worden. Darüber können Unbefugte Schadcode in eine App einfügen, ohne dass sich die kryptographische Signatur verändert.
Gust MEES's insight:
In allen noch in Gebrauch befindlichen Android-Versionen ist von der Sicherheitsfirma Bluebox eine Sicherheitslücke entdeckt worden. Sie ist bereits seit Android 1.6 alias Donut vorhanden. Bisher hat das Galaxy S4 von Samsung als einziges Android-Gerät ein Update erhalten, mit dem das Sicherheitsloch geschlossen wurde, wie die australische Webseite CIO berichtet.
Scoop.it!
Principal Security experts are confident that in the next months we will assist to the explosion for Android botnets and in general of mobile cyber threats.
Gust MEES's insight:
Scoop.it!
By Nathan Collier We have found a new threat we are calling Android.TechnoReaper. This malware has two parts: a downloader available on the Google Play Market and the spyware app it downloads. The ...
Gust MEES's insight:
Scoop.it!
A European security researcher claims to have developed a hack that allowed him to take control of aviation navigation systems using an Android phone.
He claims the Federal Aviation Administration and the European Aviation Safety Administration are working on fixing the vulnerability.
Gust MEES's insight:
He claims the Federal Aviation Administration and the European Aviation Safety Administration are working on fixing the vulnerability.
It's amazing to discover that aviation - an industry where safety is of vital importance and every physical element has one or even two fail-safe mechanisms - is failing to secure the onboard computer, the heart and brain of the plane.
Check also:
- http://www.scoop.it/t/securite-pc-et-internet?tag=Airplane+Hijacking
Scoop.it!
En raison d’une plainte de rivaux de Google qui l’accusent d’utiliser Android comme cheval de Troie afin de favoriser ses applications, la Commission européenne examine, dans une deuxième enquête, les pratiques de Google dans ce secteur.
Gust MEES's insight:
Scoop.it!
Android is now the focus for security attacks and prevention — even if it doesn't get as much attention in this regard as Windows used to.
Ironically, as Android's secuirty issues grow, Windows is actually getting better. "Microsoft deserves kudos for making Windows more and more secure," Cobb said. And with the move to Windows 8, Microsoft is shifting toward a more closed, more secure model, specifically by by not allowing apps unless they are from a legitimate developer. Plus, Windows' issues over the years have had the effect of training people to be more careful. "Someone who's been using Windows for the last 10 years is probably better protected than a Mac person," Cobb joked. "They've had to learn the hard way."
Gust MEES's insight:
Scoop.it!
We’ve seen malware for PCs that infects mobile devices, but it turns out there’s also malware for mobile devices designed to infect PCs. Kaspersky researchers have discovered a new piece of Android malware that masquerades as a “cleaner” app meant to free memory for Google’s operating system but wreaks havoc on your smartphone in the background and on Microsoft’s operating system when it’s connected to a PC. The security firm says the malware has the most “extensive feature set” it has ever seen in one mobile app. Here’s the list: Sending SMS messages.Enabling Wi-Fi.Gathering information about the device.Opening arbitrary links in a browser.Uploading the SD card’s entire contents.Uploading an arbitrary file (or folder) to the master’s server.Uploading all SMS messages.Deleting all SMS messages.Uploading all the contacts/photos/coordinates from the device to the master.
Gust MEES's insight:
===> BEWARE of the MALWARE!!! <===
Scoop.it!
The fact that Android malware is an escalating issue comes as no surprise, but a recent analysis of its sheer 'market share' of the mobile malware universe is noteworthy.
Gust MEES's insight:
===> Be AWARE of the MALWARE! <===
Scoop.it!
Security vendor Cloudmark says it is the first time they've detected a botnet that abuses other people's phones to send spam
|
Learn more:
- https://gustmees.wordpress.com/2012/07/07/bring-your-own-device-advantages-dangers-and-risks/