Slashdot Mirror

← Back to Stories (view on slashdot.org)

Silent, Easily Made Android Rootkit Released At DefCon

Posted by Soulskill on from the it-slices-it-dices dept.

An anonymous reader writes with news that security experts from Spider Labs released a kernel level rootkit for Android devices at DefCon on Friday. "As a proof of concept, it is able to send an attacker a reverse TCP over 3G/WIFI shell upon receiving an incoming call from a 'trigger number.' This ultimately results in full root access on the Android device." The rootkit was developed over a period of two weeks, and has been handed out to DefCon attendees on DVD.

4 of 133 comments (clear)

  1. Oh how clever... by gowen · · Score: 2, Funny

    I've noticed a 0-day vulnerability in old ladies in that I can hit them over the head with a cudgel and steal their handbags. I'm going to a black-hat muggers conference to hand out cudgels and more detailed instruction. But that doesn't make be an utter scumbag, oh no. I'm a "security researcher", that's what I am, only interested in increased security for old ladies.

    --
    Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
    1. Re:Oh how clever... by sco08y · · Score: 3, Funny

      I've noticed a 0-day vulnerability in old ladies in that I can hit them over the head with a cudgel and steal their handbags.

      Already patched; the handbags have been upgraded to include a pink-enameled snub .38.

    2. Re:Oh how clever... by Nerdfest · · Score: 3, Funny

      computers and other devices are simply magic.

      Why wouldn't they; some of them are even advertised that way.

  2. Re:What it doesn't say by Anonymous Coward · · Score: 2, Funny

    Helps with reception too.