ICT Security-Sécurité PC et Internet

Kaspersky uncovers trojan spread by "spear-phish" to Tibet activists.

Malware used to spy on Tibetan activists and other ethnic groups in China is nothing new. But a new Trojan discovered by researchers at Kaspersky Labs has widened the scope of this digital espionage and intimidation. The malware uses a combination of e-mail hacking, "spear phishing," and a Trojan built specifically for Android smartphones.

===> Kaspersky claims this is the first discovery of a targeted attack that uses mobile phone malware. <===

Android is now the focus for security attacks and prevention — even if it doesn't get as much attention in this regard as Windows used to.

Ironically, as Android's secuirty issues grow, Windows is actually getting better. "Microsoft deserves kudos for making Windows more and more secure," Cobb said. And with the move to Windows 8, Microsoft is shifting toward a more closed, more secure model, specifically by by not allowing apps unless they are from a legitimate developer.

Plus, Windows' issues over the years have had the effect of training people to be more careful. "Someone who's been using Windows for the last 10 years is probably better protected than a Mac person," Cobb joked. "They've had to learn the hard way."

Lookout, ein Hersteller für Sicherheits-Tools für mobile Geräte, hat in einer aufwändigen Studie herausgefunden, dass alleine durch eine Schädlingsfamilie rund 10 Millionen Dollar Schaden entstanden ist.

Mehr erfahren:

http://www.pcwelt.de/news/Studie-Mobile-Schadsoftware-verursachte-10-Millionen-Dollar-Schaden-6553565.html?r=261529428405648&amp;lid=194844

Recently Trusteer discovered the first Tatanga-based man in the mobile (MITMO) attack as well as new SPITMO configurations which are targeting Android mobile banking users in Germany, the Netherlands, Portugal and Spain.

With nearly 60 percent of the market and a reputation for weak app security, it’s no surprise that Android has become the preferred target for financial malware.

Read more:

http://www.net-security.org/malware_news.php?id=2183

Secunia Releases Personal Software Inspector for Android

McAfee makes some predictions about what to expect and trends to watch for security in 2013.

Mobile malware has now become a profitable industry. Because of its global ubiquity as a phone payment mechanism, premium text billing is the most common tactic used by malware writers to commit financial fraud on mobile.

This class of malware, termed “Toll Fraud,” has become the most prevalent type of malware within the past year. Just one family of Toll Fraud malware, FakeInst, accounted for 82 percent of Lookout user detections in June 2012 and is estimated to have successfully stolen millions of dollars from people in Russia, the Middle East, and parts of Europe.

Read more:

http://www.net-security.org/malware_news.php?id=2260&amp;utm_source=dlvr.it&amp;utm_medium=twitter

The Norton Cybercrime Report is out for 2012!

Cybercrime continues to have far-reaching effects and is increasingly a problem on mobile devices and in our social networks (where we seem to be less vigilant).

After surveying more than 13,000 consumers in 24 countries, the researchers found that the numbers of online adults increased by 20 percent from last year, and that cybercrime impacted just under &frac12; of them in the previous 12 months. The total direct consumer cost was calculated to be $110 billion, slightly down from last year’s $114 billion (USD), with the average cost per victim down approximately 20 percent. The reason the overall cost remains so high is that the pool of victimized online adults grew more rapidly - in other words, less money, but from more victims.

The nature of the crimes is shifting towards the social networks we love and the mobile devices we use constantly. Consumers seem to have figured out the basics of protecting themselves on their desktop and laptop computers and report using basic security measures and caution to stay safe. It would seem they’ve really gotten the message about things like being careful what you click on and deleting suspicious emails without opening them. Programs, like the October Cyber Security Awareness Month and the NCSA’s “Stop.Think.Connect.” campaign, are likely having a positive impact on consumer behavior!

Read more:

http://community.norton.com/t5/Ask-Marian/Cybercrime-is-a-Global-Problem-Increasingly-Social-and-Mobile/ba-p/796538

DFI News Digital Forensic Investigator is a multi-media resource for digital forensic professionals working in academic, government, law enforcement, and corporate settings.

Call it Invasion of the iPhone Snatchers: a new FinFisher-based spyware is built to infect iPhones and iPads (and Android, BlackBerry and Windows Phone gadgets too) in order to take over the device completely — all unbeknownst to the user.

The smartphones and tablets will innocently appear to be themselves, but in reality the mobile malware is working in the background to track the device’s location, monitor activity and intercept communications including emails, voice calls and text messages.

Read more:

http://www.dfinews.com/news/spyware-takes-over-iphones-androids?et_cid=2825646&amp;et_rid=454853272&amp;linkid=http%3A%2F%2Fwww.dfinews.com%2Fnews%2Fspyware-takes-over-iphones-androids#.UEDceehnFCE.twitter

Android, Nokia compromised....

A malicious wireless tag has been created that can crack an Android phone in seconds.

The tag exploits a vulnerability in near field communication (NFC), a wireless technology popular on Android phones that establishes communication between devices through physical contact.

Well-known Apple hacker and Accuvant researcher Charlie Miller wowed the crowed at Black Hat Las Vegas through a demo that involved infiltrating an Android phone by simply grazing it with a tag embedded with an NFC chip...

Read more:

http://www.scmagazine.com.au/News/310189,blackhat-phones-hijacked-by-malicious-nfc-tag.aspx?utm_source=dlvr.it&amp;utm_medium=twitter

What is "jailbreaking" and "rooting"?

iOS: Jailbreaking is the process of modifying iOS system kernels to allow file system read and write access. Most jailbreaking tools (and exploits) remove the limitations and security features built by the manufacturer Apple (the "jail") through the use of custom kernels, which make unauthorized modifications to the operating system. Almost all jailbreaking tools allow users to run code not approved and signed by Apple. This allows users to install additional applications, extensions and patches without the control of Apple’s App Store.

Android: Rooting is the process of gaining administrative or privileged access for the Android OS. As the Android OS is based on the Linux Kernel, rooting a device is analogous to gaining access to administrative, root user-equivalent, permissions on Linux. Unlike iOS, rooting is (usually) not required to run applications outside from the Android Market. Some carriers control this through operating system settings or device firmware. Rooting also enables the user to completely remove and replace the device's operating system.

Read more:

http://www.owasp.org/index.php/Projects/OWASP_Mobile_Security_Project_-_Dangers_of_Jailbreaking_and_Rooting_Mobile_Devices

Lookout Mobile Security has identified hacked websites targeting Android devices, an attack vector previously only used to infect PCs with malware.

Read more...

A new Symantec report shows that while the number of vulnerabilities decreased by 20 percent, the number of malicious attacks continued to skyrocket by 81 percent.

In addition, the report highlights that advanced targeted attacks are spreading to organizations of all sizes and variety of personnel, data breaches are increasing, and that attackers are focusing on mobile threats.

Read more...