41–50 of 66 posts
Cool... can I use it to have a decent app to record a phone call? All other existing solutions require you to turn on speaker phone.
Earlier quoted context omitted.
C&C servers, evasion techniques like masquerading as system package, bootstrapping the encrypted payload malware with a wrapper APK, ransomware features, piles of exfiltrated informaiton, intercepting calls and text messages, ransomware functionality... it's like a crook with a record the size of a phonebook.
But, unless I somehow missed a big point, doesn't it start with the user installing a malicious package?
"The malware masquerades as a legitimate or popular app that uses the names App, MMS, whatsapp, and even Pokemon GO. When the app is launched, it base64-decodes a string from the resource file and writes it down, which is actually the malicious Android Application Package (APK)."
The user has a legitimate expectation that the app sandbox containment provided by the OS works and nothing bad should happen if s/he tries out the aforementioned apps.
This type of malware are commonly called backdoors, see eg. http://www.virusradar.com/en/glossary/backdoor
Earlier quoted context omitted.
But, unless I somehow missed a big point, doesn't it start with the user installing a malicious package?
Not knowingly. Sounds like there is a phony app as a phishing style infection vector: "The malware masquerades as a legitimate or popular app that uses the names App, MMS, whatsapp, and even Pokemon GO. When the app is launched, it base64-decodes a string from the resource file and writes it down, which is actually the malicious Android Application Package (APK)." The user has a legitimate expectation that the app sa…
I agree with @debatem1, this is not what "backdoor" commonly means, phishing does not count as "without the user's knowledge". Phishing is a trick to get in the front door.
Cool... can I use it to have a decent app to record a phone call? All other existing solutions require you to turn on speaker phone.
Title is misleading, it makes it sound like the backdoor is in the Android software while this is just malware.
The point is that android makes it possible. You don't have these things on iOS because apple doesn't allow them, where google does.
Earlier quoted context omitted.
The point is that android makes it possible. You don't have these things on iOS because apple doesn't allow them, where google does.
How quickly you forget the malware that was served by the iOS App Store https://sputniknews.com/science/201509211027280404/
Earlier quoted context omitted.
Of course you can deny them. After you install the app, just go into settings and deny every permission.
Does not always work because shady apps often check for permissions on boot and refuse to start if i.e. some fart app can't access that contact list of yours "it desperately needs to function properly". Denying permissions only mitigates cases when all permissions are asked due to the lack of proficiency or laziness of app developers not an intended malicious behavior.
Why is this being called a backdoor? Is there any indication that that's what it is? Except for the headline, the only claim even remotely as serious made in the article is that it can root some devices, and figuring out which ones is left as an exercise for the reader...
Earlier quoted context omitted.
Not knowingly. Sounds like there is a phony app as a phishing style infection vector: "The malware masquerades as a legitimate or popular app that uses the names App, MMS, whatsapp, and even Pokemon GO. When the app is launched, it base64-decodes a string from the resource file and writes it down, which is actually the malicious Android Application Package (APK)." The user has a legitimate expectation that the app sa…
That link says right at the top, "The difference between this type of malware and a legitimate application with similar functionality is that the installation is done without the user’s knowledge." I agree with @debatem1, this is not what "backdoor" commonly means, phishing does not count as "without the user's knowledge". Phishing is a trick to get in the front door.
The user wanted to install a WhatsApp, Pokemon, etc type of application but was phished or otherwise deceived into completing the app installation interaction, and was left with no knowledge about the backdoor.
> The malware masquerades as a legitimate or popular app that uses the names App, MMS, whatsapp, and even Pokemon GO. OK, so the attack vector here is installing dodgy stuff off the Play store? Or not the play store but from another source, such as an ad?