Toward A Greater Mobile Mal-Awareness

ronjor · Jul 24, 2013

Toward A Greater Mobile Mal-Awareness

Several recent developments in mobile malware are conspiring to raise the threat level for Android users, making it easier for attackers to convert legitimate applications into malicious apps and to undermine the technology that security experts use to tell the difference.

Last week, Symantec warned about a new malware toolkit or “binder” designed to Trojanize legitimate Android apps with a backdoor that lets miscreants access infected mobile devices remotely. Binders have been around in a variety of flavors for many years, but they typically are used to backdoor Microsoft Windows applications.
Click to expand...

https://krebsonsecurity.com/2013/07/toward-a-greater-mobile-mal-awareness/

ronjor · Jul 24, 2013

Related.

Google strengthens Android security muscle with SELinux protection

by Dan Goodin

The upcoming version of Google's Android operating system offers several enhancements designed to strengthen handset security, particularly in businesses and other large organizations. Ars will be giving the just-unveiled version 4.3 a thorough review in the coming days. In the meantime, here's a quick rundown of the security improvements.

The most significant change is the addition of a security extension known as SELinux—short for Security-Enhanced Linux—to reinforce Android's current hack-mitigation model. Since Android's debut, apps have run inside a "sandbox" that restricts the data they can access and isolates code they can execute from other apps and the operating system as a whole. Built on a traditional Unix scheme known as discretionary access control, Android sandboxing prevents the pilfering of sensitive passwords by a rogue app a user has been tricked into installing or by a legitimate app that has been commandeered by a hacker.
Click to expand...

http://arstechnica.com/security/201...ecurity-muscle-with-nsa-developed-protection/

J_L · Jul 24, 2013

SELinux is worthwhile, but hopefully developers won't need to make 4.3-specific apps for compatibility.

Log in or Sign up

Toward A Greater Mobile Mal-Awareness

ronjor Global Moderator

ronjor Global Moderator

J_L Registered Member

Log in or Sign up

Toward A Greater Mobile Mal-Awareness

ronjor Global Moderator

ronjor Global Moderator

J_L Registered Member

Useful Searches