Hm, I don't see any reference to an exploit that's being used. What versions of Android does this affect? It says 2012, so this could very well have been eradicated.
'Sophisticated' Android malware hits phones
11–19 of 19 posts
Re: 'Sophisticated' Android malware hits phones
#12I noticed this has the smell of press-release-as-a-news-report, with Lookout being an Android security company, and them being pretty much the only source in the article. Makes me a little skeptical on how big of an issue this really is. I wonder if there's any solid estimates on what percent of devices are in these phone botnets, and in what regions.
I would be interested in knowing more about how they actually compromise individual devices, but the article, and the linked Lookout blog post, seem light on those details.
Re: 'Sophisticated' Android malware hits phones
#13Hm, I don't see any reference to an exploit that's being used. What versions of Android does this affect? It says 2012, so this could very well have been eradicated.
The exploit is social engineering:
"NotCompatible is being spread via spam and websites seeded with booby-trapped downloads"
Re: 'Sophisticated' Android malware hits phones
#14Not sure if it's related, but when browsing sites on my phone I have noticed a lot of ads on websites that redirect you either to a page with an Android download on it, or to a specific game in the Play store. You leave the page you wanted to look at entirely.
I've gone to Firefox+AdBlockPlus on my Android phones, after getting one too many Play Store popups. It makes browsing a lot less aggravating. No, I don't want to play Candy Crush.
On PCs, I prefer using NoScript instead, but NoScript could get kind of bothersome on a phone.
Re: 'Sophisticated' Android malware hits phones
#15Earlier quoted context omitted.
I assume they're using the other definition of the term "bug" as in "you caught the cold bug." It might be local (UK specific) slang though that catching a "bug" is akin to catching a disease or virus.
Never heard of that. Regards, A Brit.
I have heard of it in British shows.
Regards,
A Dutchman.
Re: 'Sophisticated' Android malware hits phones
#16Are there any current methods of detection? What about this warning of "any app that required a security update to be installed before it was run" - what is that going to look like? A standard Android warning/request dialog?
> A standard Android warning/request dialog? No, Android does not have standard dialog that requests do make security updates. There is a notification/activity, that alerts you, when system update is available. In some rare cases, there may be messagebox telling you, that Google Play Services need to be updated (and after tapping OK, it opens Play Store for you). What the article describes, is more like drive-by-inst…
> No, Android does not have standard dialog that requests do make security updates.
OTA updates are in all modern Android devices and it does ask you to update when new versions come out. They aren't security patches necessarily or communicated that way though, they are OS updates, that reflash your phone.
Re: 'Sophisticated' Android malware hits phones
#17Not sure if it's related, but when browsing sites on my phone I have noticed a lot of ads on websites that redirect you either to a page with an Android download on it, or to a specific game in the Play store. You leave the page you wanted to look at entirely.
I've gone to Firefox+AdBlockPlus on my Android phones, after getting one too many Play Store popups. It makes browsing a lot less aggravating. No, I don't want to play Candy Crush. On PCs, I prefer using NoScript instead, but NoScript could get kind of bothersome on a phone.
"Do you want to install our Android app?" ugh. If I did, I'd be LOOKING YOU UP IN PLAY!
Probably the most frustrating thing. Rooted phone, with adblock installed, using Chrome.
Re: 'Sophisticated' Android malware hits phones
#18Earlier quoted context omitted.
I assume they're using the other definition of the term "bug" as in "you caught the cold bug." It might be local (UK specific) slang though that catching a "bug" is akin to catching a disease or virus.
Never heard of that. Regards, A Brit.
Well ... it is pretty commonly used in the UK to mean disease/virus etc. such as 'a stomach bug', but I still don't think that excuses or explains its usage in this article. To me that just reads like a poor use of technical terminology.
But yeah as another commenter noted this article is aimed at a non-technical audience.
Re: 'Sophisticated' Android malware hits phones
#19Hm, I don't see any reference to an exploit that's being used. What versions of Android does this affect? It says 2012, so this could very well have been eradicated.
It also does not mention whether Play Services can detect it or not, which is a crucial piece of information.
Not including it makes it sound a lot like a FUD piece in order to raise sales for LookOut