Thursday, 17 May 2012
Fortinet uncovers new Android botnet
Fortinet uncovers new Android botnet
By SecurityAsia Editors | Aug 8, 2011
0 comments
Digg
PrintFortinet’s most recent thread landscape report details a new variant of Zitmo (Zeus in the mobile) that was written to run on the Android operating system, allowing the malware to continue its expansion across mobile platforms beyond the Windows Mobile, Symbian and BlackBerry operating systems.
Since it was first discovered back in September 2010 on the Symbian OS (SymbOS/Zitmo.A!tr), the Zitmo has since evolved and is now capable of intercepting two-factor authentication that banks use to validate the identity of the account holder when logging in. Zitmo can forward and spy on all SMS messages, even if a mobile user does not rely on the two-factor authentication method for banking activities.
On July 24, FortiGuard Labs observed a surge of activity from the W32/Exchanger Trojan downloader, which downloaded and installed 10 different malware families within the course of a day onto the lab's test system. This type of rapid mass infection can cause a system to become unstable and ultimately crash.
"Most infections we see like this in our labs serve a similar purpose to W32/Exchanger and are known in the digital underground as 'loaders'," said Derek Manky, senior security strategist at Fortinet.
"Loaders are botnets with simple functionality. They report status, such as uptime, operating system version, geographic location, etc., and receive download commands from their controllers. Such statistics help cyber criminals manage their infections, bill customers for installing malware on a given number of systems and provide reports to their clients as a quality of service metric."
Similar
Add comment
knowledge_central_tab
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.
