Slashdot Mirror
Mobile Spyware Conferences Into Your Calls
wiredmikey writes "Reports of Multiple Variants of Android Virus 'Hong Tou Tou' are showing up, which has mainly been working its way onto smartphones via alternative app marketplaces.
Today, we saw reports of a new variant of spyware "Spy.Felxispy" targeting Symbian devices, identified by the National Computer Virus Emergency Response Centre of China. More than a dozen variants of the spyware have emerged since the first was spotted, and the latest has affected 150,000+ devices. Once installed, the spyware will turn on the Conference Call feature of the device without users' awareness. When users are making phone calls, the spyware automatically adds itself to the call to monitor the conversation."
Say what you will about Apple's "walled garden" but I don't hear of such things on their AppStore.
It happens just by businesses rather than "cybercriminals" http://www.readwriteweb.com/archives/dear_iphone_users_your_apps_are_spying_on_you.php And of course all platforms have had some sort of remote exploit http://news.cnet.com/8301-27080_3-10299378-245.html Conclusion: "walled gardens" for apps just provide a feeling of security, while giving up the user-freedom of installing any app. Personally I prefer the freedom and am (so far) very happy with the homebrew community support offered by Palm (and now HP) http://www.precentral.net/hp-donates-server-homebrew-webos-internals-group
When users are making phone calls, the spyware automatically adds itself to the call to monitor the conversation.
To what end? Does it record the call and then transfer the audio somewhere? or is there a whole army of hackers waiting to 'listen in' on the calls as they get conferenced to some central numbers. Oh, and what are these numbers and has anybody tried calling them?
Or does it just add costs to your call by turning it into a conference call? If so does one particular Telco benefit?
"Oops, I always forget the purpose of competition is to divide people into winners and losers." - Hobbes
I know most /.ers don't RTFA
I was just leading readers along a path that ends with questioning the alarmist nature of the SecurityWeek article.
Its not a Virus, it doesn't propagate itself. You only get this Trojan by going to a unsecured website (A Chinese one at that) website and downloading it from there.
In other news, iPhones are dangerous when eaten.
**TODO** Steal someone elses sig.