ICT Security-Sécurité PC et Internet

French police have arrested a 20-year-old man in Northern France, in connection with an attack that infected thousands of Android smartphones with money-making malware.

Read more:

http://nakedsecurity.sophos.com/2012/10/19/android-malware-author-france/?utm_source=twitter&utm_medium=status%2Bmessage&utm_campaign=naked%2Bsecurity

Cybercriminals are working on more complex schemes to wage attacks on PCs, laptops, and smartphones.

A new report shows that:

===> every single device that connects to the Internet is in danger. <===

Read this blog post by Dara Kerr on Security & Privacy:

http://news.cnet.com/8301-1009_3-57506159-83/apples-ios-and-android-are-new-favorite-malware-victims/

Mobile variants of the commercial FinFisher trojan target BlackBerry, Windows Mobile, Symbian, Android and iOS devices.

The commercial FinFisher FinSpy spyware trojan was created by Gamma International, and its development is believed to take place in Germany. The company sells its trojan toolkit – which is thought to currently support all major operating systems including Linux, Mac OS X and Windows – to governments for use by security agencies. Until now, relatively little was known about the mobile variant of the trojan.

Based on the available code samples, Citizen Lab is convinced that the mobile trojans it analysed are a mobile variant of FinSpy. The trojan is believed to be capable of monitoring rooms through silent calls, downloading files, tracking a user's location, and forwarding phone calls, SMS text messages and emails. FinSpy can also apparently intercept BlackBerry Messenger messages. The trojan typically infects smartphones via specially crafted emails.

The iOS variant requires iOS 4 or later and is executable on all iPad models, on iPhone 4 and 4S devices, and on third and fourth generation iPod Touch devices. The app installs in the background, downloads further code, and injects this code into the startup routine, anchoring itself deep into the system. The researchers found "FinSpyV2" references in the binary. As the binary contains a valid developer certificate and an ad-hoc distribution profile, iOS devices accept it without the need for a jailbreak. The certificate was issued to Martin Münch – the managing director of Gamma International's German subsidiary.

Three websites which distributed copyrighted smartphone 'apps', or applications, have been shut down by law enforcement authorities in the US, in which the Department of Justice (DoJ) said was the first case involving "cell phone app marketplaces".27 Aug 2012

The DoJ said that the seizures were the result of "comprehensive enforcement action taken to prevent the infringement of copyrighted mobile device apps" involving international authorities, including those in France and the Netherlands. Visitors to any of the three sites - applanet.net, appbucket.net and snappzmarket.com - will now find a banner notifying them that the relevant domain name has been seized by the authorities and informing them that "wilful copyright infringement" is a federal crime.

Read more:

http://www.out-law.com/en/articles/2012/august/us-courts-order-first-seizure-of-android-app-piracy-domains/

Android Botnet Used to Advertise Shady Pharmacy Sites, Experts Find...

Read more:

http://news.softpedia.com/news/Android-Botnet-Used-to-Advertise-Shady-Pharmacy-Sites-Experts-Find-279336.shtml?utm_source=dlvr.it&amp;utm_medium=twitter

The company says the apps demand a 'suspicious' number of high-risk permissions.

According to a new report from Bit9, more than 100,000 Android apps in the Google Play store (25 percent of more than 400,000 apps studied) pose a security risk to users.

Read more:

http://www.esecurityplanet.com/mobile-security/bit9-25-percent-of-google-play-apps-pose-a-security-risk.html

With its vast number of Android users and their preference for third-party online app markets, China is the perfect breeding ground for new Android malware.

Chinese mobile security company TrustGo Security has recently discovered an Android Trojan that targets Chinese users exclusively, as it takes advantage of a vulnerability in the China Mobile SMS Payment process to generate unauthorized payments, steal bank card numbers and money transfer receipt information.

Read more:

http://www.net-security.org/malware_news.php?id=2230

By Jim Finkle LAS VEGAS (Reuters) - Hacking experts have demonstrated ways to attack Android smartphones using methods they said work on virtually all such devices in use today, despite recent efforts by search engine giant Google to...

Des pirates ont accédé aux données des membres du forum américain Android Forums, qui compte plus d’un million de membres. Nvidia a de son côté fermé la zone Développeurs suite à une intrusion.

En savoir plus :

http://www.zdnet.fr/actualites/un-million-d-adresses-email-volees-suite-au-piratage-d-un-forum-android-39774162.htm

L’éditeur Trend Micro anticipe une importante croissance des malwares sur Android et avertit que la situation pourrait devenir pandémique d’ici à la fin de l’année.

L’éditeur japonais affirme que le nombre d’applications malicieuses sur plates-formes Android est passé de 10 000 à 20 000 en seulement un mois et que des centaines de milliers de périphériques ont été infectés par des applications que l’on peut trouver sur la plate-forme GooglePlay. L’éditeur indique que 17 applications contenant un malware ont été téléchargées à plus de 700 000 reprises avant d’être supprimées par Google. Durant les trois premiers mois de l’année, plus de 5000 applications destinées à infecter les téléphones Android ont été découvertes, soit une multiplication par quatre et les chiffres continuent à augmenter.

Pour le troisième trimestre, le nombre pourrait atteindre 38 000 malwares et … 130 000 au cours du 4ème trimestre, ce qui permet de qualifier la situation de pandémie.

$$$$$$$$$$$$$$$$$$$$$$$$$$$

En savoir plus :

http://www.linformaticien.com/actualites/id/25524/malwares-android-vers-la-pandemie.aspx?utm_source=twitterfeed&amp;utm_medium=twitter