SCF Advanced Search



Members
Stats
  • Total Posts: 36755
  • Total Topics: 11617
  • Online Today: 1259
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)











Author Topic: Backdoor.AndroidOS.Obad.a - the most sophisticated mobile malware, till now!  (Read 2858 times)

0 Members and 1 Guest are viewing this topic.

Samker

  • SCF Administrator
  • *****
  • Posts: 7501
  • KARMA: 321
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • SCforum.info - Samker's Computer Forum


Security researchers at Kaspersky Lab report that a recently discovered Android Trojan is the most sophisticated such mobile malware yet to be identified.

In a post to Kaspersky Lab's Securelist blog, security expert Roman Unuchek describes the malicious program, dubbed Backdoor.AndroidOS.Obad.a or "Obad" for short, as being closer to Windows malware than to your typical mobile Trojan, owing to its complexity and sophistication: http://www.securelist.com/en/blog/8106/The_most_sophisticated_Android_Trojan

Obad uses multiple layers of encryption and code obfuscation to conceal what it's doing, and it exploits previously unknown vulnerabilities in the Android OS to gain near total control over a device.

It runs in the background and has no visible user interface, but communicates with command and control (C&C) servers over the device's internet connection, and can even accept commands via SMS text messages.

Worse, once Obad gains Device Administrator privileges, it takes advantage of an Android vulnerability to hide itself from the list of applications that have such privileges, making it impossible for the user to remove it from the device.

Once installed, Obad can be commanded to perform a variety of functions. It can connect to internet addresses, ping servers, download files from servers and install them, and send text messages. It can also send data about the compromised device to the C&C servers, including information about installed applications and the user's contact data.

On the more sophisticated side, Obad can allow cybercriminals to execute console commands via remote shell, send files to all detected Bluetooth devices, and can act as a proxy server, sending data to a specified address and returning the response.

What's more, Obad has the ability to block the device's screen for up to ten seconds, to help conceal its malicious activity from the user.

Kaspersky Lab has offered no theory as to who might be running the Obad malware, and no point of origin has been identified.

Unuchek says Kaspersky has already informed Google about the Android vulnerabilities exploited by the Trojan, and Obad can now be detected by security software from Kaspersky and other vendors.

If there is a bright spot to any of this, it's that however sophisticated, Obad is still relatively rare. Over a three-day observation period, Kaspersky Lab found that Obad accounted for no more than 0.15 per cent of all attempts to infect mobile devices with malware – for now, at least.

(ElReg)


P.S.

Protect your Android for FREE ;) :
http://scforum.info/index.php/board,28.0.html

P.P.S.

My choice is Avast! :thumbsup:

devnullius

  • SCF VIP Member
  • *****
  • Posts: 3579
  • KARMA: 155
  • Gender: Female
    • SCForum.info
P.S.

Protect your Android for FREE ;) :[/color] http://scforum.info/index.php/board,28.0.html

P.P.S.

My choice is Avast! :thumbsup:


Personal experience or hearsay? ; )

And again a scary article - thanx :(

Karma!

Devvie


~~~ notemail@facebook.com ~~~

Conare nullius momenti videri fortasse missilibus careant
——
All spelling mistakes are my own and may only be distributed under the GNU General Public License! – (© 95-1 by Coredump; 2-013 by DevNullius)
More information about bitcoin, altcoin & crypto in general? GO TO  j.gs/7385484/btc

Cuisvis hominis est errare, nullius nisi insipientis in errore persevare... So why not get the real SCForum employees to help YOUR troubled computer!!! SCF Remote PC Assist http://goo.gl/n1ONa9

Samker

  • SCF Administrator
  • *****
  • Posts: 7501
  • KARMA: 321
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • SCforum.info - Samker's Computer Forum

Samker's Computer Forum - SCforum.info


 

With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Verification:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters):www.scforum.info:

Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising