Thursday, 17 May 2012
Fortinet reveals top 5 android malware in 2011
Fortinet reveals top 5 android malware in 2011
By Security Asia Editors | Dec 19, 2011
0 comments
Digg
PrintAccording to research conducted by Fortinet, the number of detected Android has risen by as much as 90% this year, compared to 2010.
The Top 5 malware families for which FortiGuard Labs have received the most samples in 2011 are:
- Geinimi: Android’s first botnet, which sends a victim's geographic location and controls his/her phone remotely. For example, Geinimi can force the infected phone to call a given phone number.
- Hongtoutou: A Trojan live wallpaper that steals private information such as the victim's subscriber number (IMSI) and automatically visits Websites that the malware directs it to.
- DroidKungFu: Another botnet that has multiple capabilities such as remotely installing other malware, remotely starting specific applications and adding bookmarks.
- JiFake: A fake instant messenger application that sends SMS messages to premium phone numbers
- BaseBridge: A Trojan that sends SMS messages to premium numbers
Malware such as BaseBridge was available on the Android market but was later removed. Oftentimes malicious software tries to pass itself off as a genuine application, although malware has also been found within a legitimate application they have infected.
“DroidKungFu was an example of malware that was found repackaged in a legitimate VPN utility, whereas Geinimi was found within the legitimate application ‘Sex Positions,’” said Karine de Ponteves, malware analyst at Fortinet.
Android Vulnerability
Last month, Jon Larimer and Jon Oberheide unveiled a vulnerability for Android platform 2.3.6 that revealed an easy way for hackers and malicious software developers to gain and exploit root access to an Android device.
“The mobile security trend is a familiar one: as operating systems mature and gain popularity, malware and vulnerabilities follow since there is focus and motivation from cyber criminals,” observed Derek Manky, senior security strategist at Fortinet. “With root access, hackers can gain access to system files and change system settings that are typically authored to be read only. For example, a malware creator with root access to a vulnerable device could silently download and install additional malicious software, such as ransomware, spambots and keyloggers.”
Similar
Add comment
knowledge_central_tab
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.
