SMS-Controlled Malware Hijacking Android Phones

← Back to Stories (view on slashdot.org)

SMS-Controlled Malware Hijacking Android Phones

Posted by samzenpus on Monday April 9, 2012 @04:28AM from the Taking-over dept.

wiredmikey writes "Security researchers have discovered new Android malware controlled via SMS that can do a number of things on the compromised device including recording calls and surrounding noise. Called TigerBot, the recently discovered malware was found circulating in the wild via non-official Android channels. Based on the code examination, the researchers from NQ Mobile, alongside researchers at North Carolina State University said that TigerBot can record sounds in the immediate area of the device, as well as calls themselves. It also has the ability to alter network settings, report its current GPS coordinates, capture and upload images, kill other processes, and reboot the phone. TigerBot will hide itself on a compromised device by forgoing an icon on the home screen, and by masking itself with a legit application name such as Flash or System. Once installed and active, it will register a receiver with a high priority to listen to the intent with action 'android.provider.Telephony.SMS_RECEIVED.'"

94 comments

Min score:

Reason:

Sort:

NQ Mobile link by OzPeter · 2012-04-09 04:31 · Score: 2

Security Alert: New Android Malware — TigerBot — Identified in Alternative Markets

And frist?

--
I am Slashdot. Are you Slashdot as well?
1. Re:NQ Mobile link by tripleevenfall · 2012-04-09 04:36 · Score: 2
  
  I'm having a hard time understanding why anyone would install the typical greyware apps from a random source outside of the android market... seems pretty risky.
2. Re:NQ Mobile link by OzPeter · 2012-04-09 04:41 · Score: 0, Flamebait
  
  I'm having a hard time understanding why anyone would install the typical greyware apps from a random source outside of the android market... seems pretty risky.
  Because they're free to do so .. not like those Apple hipsters that force you to use their walled garden.
  
  What's the point of a differentiating your market (walled vs non-walled) if your customers can't exploit all of the possibilities?
  
  So the Android crowd has traded oversight for freedom, and rationalized that the risk is worth it..
  
  --
  I am Slashdot. Are you Slashdot as well?
3. Re:NQ Mobile link by tripleevenfall · 2012-04-09 04:49 · Score: 1
  
  I've used both platforms, and both seem to have an 'approved' appstore and both can access others by jailbreaking (sic). Even the android phones I used were locked down by the carrier to only use the 'real' appstore. I don't see what the substantive difference is in those kinds of cases.
4. Re:NQ Mobile link by Anonymous Coward · 2012-04-09 04:52 · Score: 0
  
  Because the fandroids constantly crow about being able to install apps from other sources. That is until stuff like this surfaces then the backtrack and then post some canned excuse about how you shouldn't install anything from outside of the Google market. You can't have it both ways, fandroids.
5. Re:NQ Mobile link by Anonymous Coward · 2012-04-09 04:57 · Score: 3, Insightful
  
  That's not the WHY though.
  They WHY is because people with the 'click' mentality, that is stronger on a mobile, have less fear of adding a possibly infected program. I just don't think the regular Joes of the world have as much awareness of possible malware laden software when it comes to their phone.
6. Re:NQ Mobile link by tlhIngan · 2012-04-09 05:01 · Score: 4, Informative
  
  I'm having a hard time understanding why anyone would install the typical greyware apps from a random source outside of the android market... seems pretty risky.
  Easy - piracy. It's the same reason people will happily torrent new release games and applications and run them on their PCs, or download Windows 7 to install on a brand new PC. Hell, malware infested versions of OS X and Photoshop abounded a couple of years ago (they installed a botnet client during the install).
  And face it - a large number of places do not support Google Wallet/Checkout/whatever, especially in places like China. They might now, but once a habit is ingrained, it tends to stay such.
  These sites popped up because of that (you couldn't get the app otherwise) and the end result is they florished and people pretty much got used to the idea of "apps are free" - why pay $2 at Play when your favorite app site has it for free within hours? And if you didn't know of any, your friends who told you what phone to get will steer you in the right direction.
  Even Google's DRM thing isn't that effective - I have seen many DRM-cracker apps available on the torrents that remove it from an APK file.
  And let's not even begin to talk about AOSP-based phones which have to be rooted/hacked to run Play - it's often easier to just download the damn app for free than hack in Play or hope that whatever market came with the device (if any) will carry it.
  For those, perhaps many of these stores have their own market apps and they get preloaded, so users don't know any better. Especially if normal developers also use those stores
  Heck, you should see the iOS piracy sites sometimes - they get overrun with people who buy the latest Apple iDevice and plead "HOW DO I INSTALL?!?!? I NEED IT NOW!!!" long before jailbreaks are released (you have to jailbreak to install the modified installer binary to allow unsigned stuff to run). Of course, without that 15-minute Google refund thing, new apps actually have to be bought and paid for, so app selection is far more limited.
  That, and Apple tends to ensure everywhere they can officially buy devices to access the App Store, Apple is right there willing to sell. (The biggest news is that Apple finally allowed Chinese customers pay in Yuan instead of US dollars).
7. Re:NQ Mobile link by scot4875 · 2012-04-09 05:26 · Score: 1
  
  You can't have it both ways, fandroids.
  We aren't trying to. It's a known risk. And your walled garden doesn't seem to do a very good job of keeping out spyware either, so it doesn't even seem to be much of a tradeoff. (See the recent report that apps in the iTunes store leak sensitive information more than apps available from alternate locations for jailbroken phones)
  --Jeremy
  
  --
  Jesus was a liberal
8. Re:NQ Mobile link by chrb · 2012-04-09 05:28 · Score: 2
  
  both can access others by jailbreaking (sic)
  Most Android phones will, without rooting, happily allow you to load an .apk archive from the web, or over USB (with debugging enabled in settings), or to add a new app store (enable "unknown sources" in settings). The only carrier I heard of that blocked third party app stores was AT&T, and they caved when their customers started demanding access to the Amazon Appstore. There are millions of people using the Amazon Appstore, and the vast majority have not jailbroken their phones. Even the Amazon specific Kindle Fire allows adding alternative app stores.
9. Re:NQ Mobile link by Rasperin · 2012-04-09 05:29 · Score: 2
  
  How about for apps like the Amazon app store (where you get the free app of the day) and the Hulu app (which is a free app, but isn't on the market for my Samsung Galaxy S II) I had to download a hacked version of it to run it on my phone.
  
  --
  WTF Slashdot, why do I have to login 50 times to post?
10. Re:NQ Mobile link by Krojack · 2012-04-09 05:35 · Score: 1
  
  I've used 2 different Android phones from 2 different carriers. Neither were locked down.
  
  Settings -> Applications and check "Unknown sources" which is always disabled by default.
11. Re:NQ Mobile link by Hentes · 2012-04-09 05:38 · Score: 2
  
  From the articles it seems that the malware can't circumvent the permission system. If you give unlimited permissions to untrusted apps you have only yourself to blame, but otherwise you don't have to worry about where your apps came from.
12. Re:NQ Mobile link by santosh.k83 · 2012-04-09 05:44 · Score: 0
  
  And this is the reason I'll never own a smartphone. I've a 'dumbphone' right now, and after it dies I'm going back to being reachable through landline, and those who absolutely must have a mobile number can go stuff it...
13. Re:NQ Mobile link by Anonymous Coward · 2012-04-09 06:13 · Score: 0
  
  BS. There has yet to be a proven sensitive info leak on the iPhone. In fact, there has yet to ever be a compromised iPhone out in the wild, other than jailbroken ones set to the default password, or morons using Installious.
  If *anyone* had a compromised iPhone, they would be screaming to the press, Apple, their telco, and every source. However, this has yet to happen. So, if someone values their data, and not just wants to let any hacker turn their device into a spam machine, they go iOS.
  Come back when you can prove your device has been proven to be 100% secure against malware, and has been since 2007.
14. Re:NQ Mobile link by SQLGuru · 2012-04-09 06:42 · Score: 2
  
  Apparently you didn't read about Path. In this instance, iOS was very open in terms of what an application could access without asking the user (contacts). Any app could do the same as well. No jailbreak needed.
  Not saying that other mobile operating systems are better.....just countering your sensitive info leak point.
  http://articles.latimes.com/2012/feb/08/business/la-fi-tn-path-ceo-dave-morin-we-are-sorry-20120208
15. Re:NQ Mobile link by Anonymous Coward · 2012-04-09 06:51 · Score: 0
  
  AT&T promised to make available the ability to use other app stores like Amazon. They even said when that ability would be available. Then they reneged and never made it available on my wife's or daughter's HTC Aria. They still cannot check the box to enable unknown sources since it doesn't show up. They don't bother to update the devices either.
16. Re:NQ Mobile link by Anonymous Coward · 2012-04-09 07:12 · Score: 0
  
  I fully support this line of reasoning. I mean, my compter got a virus once, so I replaced it with a typewriter. Then I hurt my finger trying to unjam it, so I moved on to pencil and paper. Then one time an electrical short in a light gave me a shock, so I went to candlelight. Of course I eventually buned myself on a candle, so I decided to rely solely on the sun for light. At least until I got a sunburn and realized the best answer was to just live in a dark hole.
  --sent from my smoke signals
  --smoke generated by forest fires since a fireplace is dangerous. really I just wait for a fire somewhere in the world to generate smoke that can be interpreted in a manner that would relay a message I agree with, and then I tell people that message was mine. it's a slow process. sorry for the typos, eventually I just have to decide that a message is close enough, although waiting for this disclaimer isn't all that efficient either.
17. Re:NQ Mobile link by mean+pun · 2012-04-09 07:12 · Score: 4, Informative
  
  I've used both platforms, and both seem to have an 'approved' appstore and both can access others by jailbreaking (sic). Even the android phones I used were locked down by the carrier to only use the 'real' appstore. I don't see what the substantive difference is in those kinds of cases.
  Apart from what others have posted: the apps in the Google App store are hardly vetted: any developer can post whatever s/he likes, and it is immediately available in the store. Google may remove the app later on if it breaks some of the rules, and I don't think that happens very often. In contrast, Apple checks every version of every app, and only when it is approved it is published.
18. Re:NQ Mobile link by WindBourne · 2012-04-09 07:26 · Score: 1
  
  Actually, some of these come from the market as well. That is why I wish that Google would create another market in which code is looked over for security reasons and then the app is sold (say .99 like Apple's). While I would likely not do this, my 70 y.o. parents as well as my in-laws, WOULD. They need to KNOW that there is very little risk for them. And if it means constraining their selection a bit and having to pay a small amount, they are fine with it. I suspect that a number of regular users would be willing to support it.
  
  --
  I prefer the "u" in honour as it seems to be missing these days.
19. Re:NQ Mobile link by SiChemist · 2012-04-09 07:30 · Score: 1
  
  You forgot to tell people to get off your lawn.
  
  --
  God is imaginary
20. Re:NQ Mobile link by Anonymous Coward · 2012-04-09 09:34 · Score: 0
  
  And custom roms. I've yet to hear about anyone integrating malware with a custom rom (other than network providers with carrierIQ), but it's bound to happen sooner or later. I still use Cyanogenmod though. Just be aware that you are making a choice to trust the people behind it.
21. Re:NQ Mobile link by thegarbz · 2012-04-09 12:14 · Score: 2
  
  I don't understand why anyone would install any non-Microsoft software on a windows computer. It seems pretty risky. I mean there's all sorts of things programs are known for including leaking your information onto the internet, phoning home to the vendor, serving up unwanted ads, and all of that just in legitimate non-malware apps.
  It's even worse on windows machines because when I install an application I don't get given a list of specific permissions it has, such as access to my harddisk, internet, webcam, email client, etc. I literally have no idea what will happen when I click on that .exe file.
  Computers are too risky to use, as are smartphones. We need to go back to telegraph towers, it's the only way to be safe.
22. Re:NQ Mobile link by dudpixel · 2012-04-09 15:49 · Score: 1
  
  Google do run automated checks against every app that is submitted on android market.
  It works much like antivirus I suppose, and is continually improving. This is since mid 2011.
  Its not as "free for all" as you might expect.
  Apple have gone for a more radical approach, but remember there are pros and cons with both.
  Just owning an android phone does not mean you will have your data compromised.
  
  --
  This seemed like a reasonable sig at the time.
23. Re:NQ Mobile link by Inda · 2012-04-10 00:22 · Score: 1
  
  The largest problem with 'grey' sites is the constant stream of app updates that the market (Play) will not handle. I have uninstalled most of my apps because of crashes and bugs - both of which are probably fixed but I couldn't find the APKs quickly.
  
  --
  This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
24. Re:NQ Mobile link by Xest · 2012-04-10 00:32 · Score: 1
  
  In reality Apple's checks wont be much better anyway, there's now over 600,000 apps on the app store, and only 4 years since the app store opened up which means an average of over 400 apps submitted each day.
  To do any kind of worthwhile security audit on that you'd need more than a day per app, and you'd need some pretty skilled staff. Factor in weekends, and holidays, and you'll be looking at well over 1,000 staff just to do this. you then have to factor in costs of supporting those staff - premises, electricity, hardware, software. Of course, all this ignores app updates, which would similarly need to be audited to ensure change in functionality doesn't introduce new exploits.
  Honestly, I don't buy this- it's not the cost factor, we all know Apple has money, but I'm not convinced they'd even find and retain the numbers of staff they'd need with the relevant skillsets to be able to realiably audit apps to a decent level. I'm not even convinced the cost/benefit ratio really works out.
  Realistically Apple itself probably doesn't do much more than automated checks, with perhaps a bunch of low level fairly low paid staff to actually use the app and see what it does, whether it works, whether it has any banned content etc.
  Primarily what Apple's system allows is censorship and security theatre - they can pretend everything is vetted, safe, and secure, but that doesn't mean it is.
25. Re:NQ Mobile link by mean+pun · 2012-04-10 03:54 · Score: 1
  
  I think you underestimate the repetition there is in the app market: identical book wrappers around hundred of different books, club/idol fan apps that are identical except for a few logos and urls, and so on. And not every app is regularly updated.
  Moreover, Apple has strict guidelines about good coding practices, and they have the tools to enforce them on the source code. That's much more than the Android market does, even counting the virus checking that the parent post mentions. So even if all Apple would do is run code inspection tools, there would be significant difference in `vettedness'. In reality they must have tools to make sure that a supposedly innocent book wrapper doesn't use any network communication at all, and similar common-sense checks, and they will have have some knowledgable people that handle the difficult cases. Last but not least, one reason they have this reputation for capricious rejections is that they err on the side of caution.
  Calling all this just security theater is not realistic. No, it will not catch every bug and malicious trick, but I'm sure the lock on your front door can also be picked by a competent burglar, and that doesn't make that lock security theater.
  Both the Android and the Apple approach have their advantages. It's a bit like a holiday: some people prefer organized trips, some people prefer to do all the planning themselves. But do not underestimate the value of the organized trip to some people; it gets them to places they would not go otherwise.
26. Re:NQ Mobile link by Anonymous Coward · 2012-04-10 03:56 · Score: 0
  
  1) Two words: Charlie Miller.
  That's the guy who proved that you can submit an app that was a Command-And-Control malware, have it downloaded at least 10k times, and nobody be any wiser for it.
  Remember, the only reason why his app was banned (and the flashlight tether, and the .... ) is because it became public knowledge; he specifically told the news / security sites, and that's when it was booted off.
  2) Jailbreaking.
  Jailbreaking is malware; it is an app (or a PDF, as was that case a year ago) that contains a privilege escalation vulnerability. Apps (and PDFs) should never have this functionality. The only apps that should "superuser" access legit should be system tools that specifically switch users (UAC and su simplifies a temporary user-switch)
  Booyah, wrong agian!
27. Re:NQ Mobile link by Xest · 2012-04-10 22:40 · Score: 1
  
  Whilst the points you mention may improve quality, they do absolutely nothing to protect against a determined attacker and that's precisely the problem here. Repetition and so forth is entirely irrelevant, the same features do not equate to the same executable code, and when the executable code is different there is always scope for subtle introduction of an exploit.
  Code inspection tools aren't going to highlight any differences as a result of improved code quality though regardless, the fact is that the code still has to compile down to the same byte code to perform certain actions i.e. network access, because that's just how things work, hardware like network cards and so forth have fixed protocols between the software and hardware, a VM similarly does so on top of that so knowing when network access or general hardware usage occurs is something that'll be testable between code verification tools to the exact same degree.
  The problem is what is being sent over the network, what is being sent to the CPU, written to the hard disk and so forth and there's really no automated way to check anything other than the most common attacks. Only a manual code audit by someone skilled in reverse engineering is going to give a higher level of confidence and as I say - there's absolutely no way Apple do that because finding the talent and the time is just too unrealistic.
  So Apple's checks ARE security theatre, what they do do is allow for higher quality apps, and better control of content so you can keep your store porn free or whatever, so sure they're not without merit, but they're absolutely not a security tool. The only caveat I'd say about this is that filtering app quality can in itself have the side effect of making malicious software harder to get onto the device in that someone actually has to write a useful app to embed their malicious software in for it to pass quality checks, whereas on the Android marketplace no one checks your app even works to do what it's advertised to do. Fundamentally though the point is that you can get malicious software onto the Android marketplace and Apple marketplace equally if you're determined, but when you have to write a working app for the Apple marketplace, and when Apple only hold 15% of the smartphone marketshare anyway compared to Android's 50%+ it's often just not worth it.
  You are therefore right if you say Apple's store is less prone to malicious software, certainly it is, but it's no better protected by any kind of security checks Apple does when they vet apps and that's my point here - they are not the factor in protecting the store. Apple's manual vetting is entirely about application quality, and not about security - again, I guarantee they just wont be able to get the staff with the skills in the numbers they need to do proper manual security vetting on apps, and no, the automated checks are not going to be any better at Apple than Google - I'd argue if anything Google's experience in topics like machine learning and detection of malicious websites means it's actually far far better placed to build better automated security checking tools than Apple, but automated tools still only go so far.
masking itself with a legit application name... by Neil_Brown · 2012-04-09 04:33 · Score: 2, Funny

... such as Flash...
I'm sure there's a joke in here somewhere, but I can't find it...
1. Re:masking itself with a legit application name... by FunkyLich · 2012-04-09 04:42 · Score: 1
  
  I was about to ask how does this malware gets installed in the phones on the first place. But now after reading your post, I can see this was all a joke so I feel safe again.
  So... where is the joke anyhow? I don't appreciate you leaving the question half answered, you insensitive clod!
Was anyone else failing reading by dyingtolive · 2012-04-09 04:35 · Score: 1

And quietly wondering what "SMS-Controlled Mahjong Android Phones" were?

--
Support the EFF and Creative Commons. The war is coming, and they're supporting you...
1. Re:Was anyone else failing reading by oodaloop · 2012-04-09 04:45 · Score: 4, Funny
  
  I thought it said "SOS-Comptroller Malawi Carjacking Androgenous Phonemes". I'm glad I'm not the only one who can't read, and others are willing to share their reading comprehension problems for everyone to enjoy as well.
  
  --
  Tic-Tac-Toe, Global Thermonuclear War, and relationships all have the same winning move.
And NC SU link by OzPeter · 2012-04-09 04:36 · Score: 2

Dr. Xuxian Jiang has been busy identifying all sorts of Android malware.

--
I am Slashdot. Are you Slashdot as well?
Not News by girlintraining · 2012-04-09 04:37 · Score: 5, Insightful

Downloading things from backwater websites has a higher risk of malware being present than downloading from reputable sources. ...That's some fine detective work there, Lou.
More seriously; It shouldn't come as any surprise that given how valuable your location data and personal information is, and how much of that is stored on a cell phone, and how most companies have declared themselves to have absolute rights to it (go ahead, try and stop us! *evil overlord laugh*), it shouldn't be surprising that other people (legitimately or otherwise) are hopping on the "All Your Privacy Are Belong To Us" gravy train.
So people will be all like "Oh noes! Someone wrote an evil bot!" ... Of course, they'll forget that the malware that the telecos have loaded on your phone makes that look positively amateur.

--
#fuckbeta #iamslashdot #dicemustdie
1. Re:Not News by Anonymous Coward · 2012-04-09 04:45 · Score: 0, Informative
  
  Downloading things from backwater websites has a higher risk of malware being present than downloading from reputable sources
  And yet we hear constantly that the ability to do this is one of the major features of Android - its openness.
  Can't have it both ways, sport. If you want to crow about your openness, you can't downplay the existence and risk of malware like this.
2. Re:Not News by OzPeter · 2012-04-09 04:47 · Score: 3, Interesting
  
  Downloading from reputable sources
  I'm genuinely curious .. how does the Android marketplace (and I mean this generally) define and validate a "reputable source'?
  
  --
  I am Slashdot. Are you Slashdot as well?
3. Re:Not News by Anonymous Coward · 2012-04-09 04:53 · Score: 2, Insightful
  
  It's about options.
  Android phones come pre-configured to block third-party downloads and they restrict you to the Play Store. Nearly every single one of these reports of Android malware are through other sources, so devices are protected.
  Unlike Apple, though, Android phones give you the CHOICE of whether or not you want to remain under that protection. As simply as checking a box, you can be free to download and run any application you want.
  So Android gives you the best of both worlds, while Apple is simply about controlling everything you do.
4. Re:Not News by Anonymous Coward · 2012-04-09 04:53 · Score: 0
  
  I asked myself that same question when I got my first Android phone a month ago and refused to create a Google account to load applications. In the end, you have to define what is reputable yourself and you do it the same way you did before with your computer, you simply have to decide if you trust the download link or not. Since I can't use the official google market place, I found a few application through the Opera app store. I trust Opera enough, but I still do some research on everything I install. In some other scenario, I found the application I wanted available directly on sourceforge or some such source, like K9-mail.
5. Re:Not News by Anonymous Coward · 2012-04-09 05:27 · Score: 0
  
  Choice is bad! Now go wait in line for the the next version of the iPhone.
6. Re:Not News by chrb · 2012-04-09 05:43 · Score: 2
  
  If you want to crow about your openness, you can't downplay the existence and risk of malware like this.
  That's like saying that if people have the freedom to choose their own sexual partners, then you can't downplay the existence and risk of sexually transmitted infections. It is a true statement, but the probability of contracting an STI is much higher if you have lots of sex with random strangers that you meet over the internet, than if you have sex with a single known long term partner. And, for many people, the freedom of being able to choose a sexual partner is more important than being protected from the risk of choosing the wrong partner.
7. Re:Not News by chrb · 2012-04-09 06:01 · Score: 1
  
  Downloading things from backwater websites has a higher risk of malware being present than downloading from reputable sources
  how does the Android marketplace (and I mean this generally) define and validate a "reputable source'?
  The same way you defined and validated a "reputable source" before - we have had personal computers for several decades now, and this problem has always existed, and yet we managed to cope.
  There is no magic bullet solution - the Apple app store has exactly the same problem, in that you are allowing a random unknown developer somewhere in the world to run his code on your device. The only difference is that, with Apple's store, the developer has to pay some money to register. It's a slightly higher financial barrier, but it's not going to be a deterrent for serious criminals.
  I suspect the real reason that the iPhone has seen less malware targetting it is that the majority of the mobile malware out there is "premium rate SMS" fraud. If Android apps just blocked, or required user confirmation for, premium rate numbers and SMS texts, then this particular financial motive would disappear.
8. Re:Not News by Anonymous Coward · 2012-04-09 07:07 · Score: 0
  
  Honestly if you aren't going to create a Google account - you cripple the usefulness of the device if you don't buy in to the Google services. Your contacts? Automatically backed up to Google. All these whiny "I lost my phone / my SIM died / etc. so all my contacts are gone" things from people are completely bogus when you just allow your contacts to be on Google. And that's just the first service. Tying in Gmail, Google Voice, Maps, and the rest of it makes the phone truly extremely functional. But, you are certainly allowed to be scared of Google and not create an account. It is just that you have to make the tradeoff of the extra privacy you may get by tossing out the functionality that was offered in exchange for it. Most of us find the phone to be amazing when all of the Google features are turned on.
9. Re:Not News by Anonymous Coward · 2012-04-09 10:32 · Score: 0
  
  And, for many people, the freedom of being able to choose a sexual partner is more important than being protected from the risk of choosing the wrong partner.
  Which just makes it even more foolish for those with the freedom to choose a sexual partner to willingly blind themselves to the risks, and downplay the risks because "at least I can choose." Having the freedom to choose carries with it the responsibility to choose wisely.
  And even the "official" channels do precious little vetting of the applications themselves... it's sort of like saying, "Well I met her at the Regal Beagle, that's a classy place, no need to worry about diseases, I'm going in bareback!"
10. Re:Not News by dudpixel · 2012-04-09 15:50 · Score: 1
  
  I'm having difficulty with the apple equivalent of your analogy...
  
  --
  This seemed like a reasonable sig at the time.
11. Re:Not News by Bert64 · 2012-04-09 21:30 · Score: 1
  
  Having the ability to do this is a good thing, and its aimed at people who fully understand the risks...
  These options are not intended for the average user, which is why they are not enabled by default... Although the ability to install packages from untrusted sources could be a bit more difficult for users to just stumble across, it is at least a relatively advanced process to get root.
  
  --
  http://spamdecoy.net - free throwaway anonymous email - avoid spam!
In Other News by Bigby · 2012-04-09 04:38 · Score: 4, Funny

If you root your phone, your phone could be rooted!
I can't record on my Android phone but... by acidradio · 2012-04-09 04:41 · Score: 3, Funny

I can't record my own audio on my Android phone but a malware app can? So let me get this straight - to get what I believe should be a regular functionality I have to have someone install a malware app? Ridiculous. This is almost like giving someone syphillis to cure them of AIDS!
1. Re:I can't record on my Android phone but... by bartoku · 2012-04-09 05:04 · Score: 1
  
  I came hear to complain about the same thing. I have had little luck with Android phone recording apps. If they sold this Trojan in the Android Market, I mean Google Play, they could make some mad cash!
2. Re:I can't record on my Android phone but... by jeffmeden · 2012-04-09 05:08 · Score: 2
  
  I can't record my own audio on my Android phone but a malware app can? So let me get this straight - to get what I believe should be a regular functionality I have to have someone install a malware app? Ridiculous. This is almost like giving someone syphillis to cure them of AIDS!
  FUD much? Like there aren't a dozen call recording apps in the (legit version of the) app market, that keep you miles away from any malware like this article mentions?
3. Re:I can't record on my Android phone but... by the_humeister · 2012-04-09 05:28 · Score: 0
  
  Honestly, I'd rather have syphilis than AIDS. At least there's a cure for syphilis: penicillin. There's not cure for AIDS yet.
4. Re:I can't record on my Android phone but... by Anonymous Coward · 2012-04-09 05:36 · Score: 0
  
  I can't record my own audio on my Android phone but a malware app can? So let me get this straight - to get what I believe should be a regular functionality I have to have someone install a malware app? Ridiculous. This is almost like giving someone syphillis to cure them of AIDS!
  Actually, that'd be a pretty sweet deal for those infected with AIDS; because Syphillis has been completely curable in all 3 stages for decades...
5. Re:I can't record on my Android phone but... by Anonymous Coward · 2012-04-09 05:46 · Score: 0
  
  Hertz
6. Re:I can't record on my Android phone but... by InvisibleClergy · 2012-04-09 06:15 · Score: 1
  
  But all of them require you to turn on speakerphone mode, since they can't record directly from the mouthpiece. At least, last time I checked, that was true.
7. Re:I can't record on my Android phone but... by LiENUS · 2012-04-09 07:48 · Score: 1
  
  Not all do. I use total recall call recorder on my galaxy s2 just fine without speakerphone.
8. Re:I can't record on my Android phone but... by jojoba_oil · 2012-04-09 08:28 · Score: 1
  
  Just hope that you're not allergic to penicillin!
9. Re:I can't record on my Android phone but... by Anonymous Coward · 2012-04-09 09:49 · Score: 0
  
  I've used a large number of phone (and general sound) recording apps from Android store, and not a single one of them required using speakerphone to record anything. Not even two years ago!
So.. How Does it Record Calls? by CanHasDIY · 2012-04-09 04:55 · Score: 0

I've been waiting for an app that allows me to directly record calls on my DX... now, it seems someone has figured out how to make that happen.

On the downside, they stuck the code in some malware I have no intention of installing.

On the up side, someone wrote the code that allows such recording, so making an app that utilizes said code without the whole 'botnet' aspect should be fairly easy, right?

--
An enigma, wrapped in a riddle, shrouded in bacon and cheese
1. Re:So.. How Does it Record Calls? by robmv · 2012-04-09 05:22 · Score: 3, Informative
  
  ohh please stop trolling and use the Market/Play search box
2. Re:So.. How Does it Record Calls? by H0p313ss · 2012-04-09 05:27 · Score: 1
  
  ... my kingdom for a mod point...
  
  --
  XML is a known as a key material required to create SMD: Software of Mass Destruction
3. Re:So.. How Does it Record Calls? by geminidomino · 2012-04-09 05:33 · Score: 4, Insightful
  
  Was going to mod you down, but I'll post instead. Did you even LOOK at the results page you linked to? There are a handful of call recording apps (which don't seem to work on most phones. I've tried all of the ones on page 1 on both my Moment and my Evo 4G), and nine hundred and something apps with the word "call" or "record" somewhere in there.
  You'd think that an app store run by google would have smarter search capabilities...
4. Re:So.. How Does it Record Calls? by Anonymous Coward · 2012-04-09 05:42 · Score: 0
  
  He's not trolling as much as it seems. Not all phones have the hardware necessary to record both sides of the call and many that do don't have the software set up to allow it.
5. Re:So.. How Does it Record Calls? by CanHasDIY · 2012-04-09 06:10 · Score: 2
  
  ohh please stop trolling and use the Market/Play search box
  At last check (which, granted, was several months ago) all "call recording" apps for the DX do not record the call stream, but rather use the speaker to record calls through the mic.
  
  But by all means, continue with your childish assumptions. After all, what fun would the internet be if everyone actually owned a clue?
  
  --
  An enigma, wrapped in a riddle, shrouded in bacon and cheese
6. Re:So.. How Does it Record Calls? by GIL_Dude · 2012-04-09 07:12 · Score: 2
  
  One solution would be to use Google Voice and allow the call to be recorded on Google's system. Then you can access the recording from your phone, your computer, etc. I got my GV number well before you could "port" a number to GV, so I got a new number. I know that is a deal breaker for some folks so look into porting your existing number to GV. It definitely lets you record calls with no problem at all.
  
  I guess I should point out that the service is still mostly USA only.
7. Re:So.. How Does it Record Calls? by CanHasDIY · 2012-04-09 07:30 · Score: 1
  
  One solution would be to use Google Voice and allow the call to be recorded on Google's system. Then you can access the recording from your phone, your computer, etc. I got my GV number well before you could "port" a number to GV, so I got a new number. I know that is a deal breaker for some folks so look into porting your existing number to GV. It definitely lets you record calls with no problem at all. I guess I should point out that the service is still mostly USA only.
  Although my goal would be to have a local recording (i.e., process is not reliant on someone else's equipment), I'll have to check your solution out. While not ideal, it's better than nothing.
  
  Much 'preciated.
  
  --
  An enigma, wrapped in a riddle, shrouded in bacon and cheese
8. Re:So.. How Does it Record Calls? by robmv · 2012-04-09 08:08 · Score: 1
  
  someone wrote the code that allows such recording
  The same kind of hacks those applications do, so you want the same thing that malware do without the malware part, so I pointed you to the search where the first and second application tell you that there is no API for that and that they some tricks (that works on some devices
9. Re:So.. How Does it Record Calls? by Inda · 2012-04-10 00:26 · Score: 1
  
  Not true.
  
  Total Recall rings a bell. It's the app I was using to record calls before it started behaving badly on my S2 and I had to uninstall it (warez, say no more).
  
  It was a fantastic app though.
  
  --
  This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
10. Re:So.. How Does it Record Calls? by lostfayth · 2012-04-10 01:48 · Score: 1
  
  Using sipdroid with Google Voice or any SIP provider you can record calls locally, silently and if wanted, automatically. I assume other similar apps (like csipsimple) behave similarly, but I've only used sipdroid personally.
  Google Voice alone will record calls if you press 4 during the call, but does not record locally and announces that you are recording to both sides of the call. You have to enable this feature first. See: http://support.google.com/voice/bin/answer.py?hl=en&answer=115082
  As always, be familiar with the laws about recording telephone calls in your jurisdiction. If unsure, don't. ;)
11. Re:So.. How Does it Record Calls? by lostfayth · 2012-04-10 01:54 · Score: 1
  
  Oh, and so you're aware, Google Voice (alone) cannot record outbound calls. Page linked in my previous post explains that as well. Apps such as sipdroid do not have this limitation.
12. Re:So.. How Does it Record Calls? by CanHasDIY · 2012-04-10 03:21 · Score: 1
  
  Samsung S2 != Motorola DX
  
  If I'm not mistaken (which I could be, as it's been some time since I researched this), Motorola actually locks the call stream access functionality out of their devices at the hardware level, meaning that no matter what, an app cannot access the inbound call stream.
  
  Why they would do this to their customers is beyond me.
  
  --
  An enigma, wrapped in a riddle, shrouded in bacon and cheese
13. Re:So.. How Does it Record Calls? by CanHasDIY · 2012-04-10 03:24 · Score: 1
  
  Thanks, I'll be looking into your suggestion.
  
  As always, be familiar with the laws about recording telephone calls in your jurisdiction. If unsure, don't. ;)
  Good advice; Fortunately, I live in a "one-party consent" state, meaning that so long as at least 1 person in the call knows it's being recorded, everything is legal beagle :D
  
  --
  An enigma, wrapped in a riddle, shrouded in bacon and cheese
Missing key information by Scutter · 2012-04-09 05:08 · Score: 5, Insightful

This is not the first Android malware reported, and the story is always missing three key pieces of information:
1) What applications (or sites) were hosting the malware so that we can check to see if we have those apps.
2) How to tell if you are infected (and saying "it will register a receiver with a high priority to listen to the intent with action 'android.provider.Telephony.SMS_RECEIVED" doesn't really explain anything, especially to the layperson).
3) What to do about it if you are infected.
This story is no different

--

"Tell me doctor, with all of your defenses, are there any provisions for an attack by killer bees?"
1. Re:Missing key information by Anonymous Coward · 2012-04-09 05:31 · Score: 0
  
  I agree, there is no information in this article.
2. Re:Missing key information by Anonymous Coward · 2012-04-09 05:36 · Score: 0
  
  Those answers would take some research. The linked article is just a PR release wrapped in a standard news story layout for publicity. Security Week blindly published it as is. Knowing the real threat would take away from the FUD and the "shock and awe" away of the story. I'm sure the researchers at NQ who found the "virus" in the wild" have no real interest in people knowing the actual impact.
3. Re:Missing key information by Critical+Facilities · 2012-04-09 07:50 · Score: 3, Informative
  
  2) How to tell if you are infected
  
  3) What to do about it if you are infected
  This would probably be a good place to start.
4. Re:Missing key information by gl4ss · 2012-04-09 07:58 · Score: 1
  
  *
  2) How to tell if you are infected (and saying "it will register a receiver with a high priority to listen to the intent with action
  'android.provider.Telephony.SMS_RECEIVED" doesn't really explain anything, especially to the layperson).
  *
  I guess if you knew the control sequence on the sms you could try sending yourself one and see if it vanishes before the os tells you of an incoming message. that's what you can do on android sms received intent.. you can change your priority to be higher than than the built in apps for that, iirc you just need telephony perms. last time I checked the docs didn't mention this though, friggin obscurity bastards(the info is out there though - and it has valid uses! in fact a smartphone platform where you can't do this if you intent to sucks bigtime). btw this nq-mobile is a commercial outfit so they'll probably sell you sw to catch it. dunno why they'd use sms for the control though, maybe they're fishing for some iranian victims or whatever.
  *
  3) What to do about it if you are infected.
  *
  uninstall. though reflash would probably be more appropriate. from the description it seems that it could be just all java/dalvik code that would disappear with just that. they don't mention if it can do silent installs or fetch binaries to run in the linux side over the network or stuff like that though.. it really sounds like the kind of malware that you'd use to spy on your spouse etc stupid shit.
  
  --
  world was created 5 seconds before this post as it is.
5. Re:Missing key information by Anonymous Coward · 2012-04-09 08:17 · Score: 0
  
  No, you are supposed to go to the researchers site who find this virus and wrote the article (NQ Mobile) and buy their software. They have no vested interest in this factless OMG FUD stories, really.
6. Re:Missing key information by Anonymous Coward · 2012-04-09 10:29 · Score: 0
  
  There are some devices where there is no ability to reflash. Take the Motorola Atrix 2 -- it was only until recently that a stock FXZ was found.
  As for SMS, that could easily be a way a C&C server can control its clients.
7. Re:Missing key information by dudpixel · 2012-04-09 15:53 · Score: 1
  
  android market already automatically scans all apps for known threats. its like running avg on the store, rather than on your phone.
  my recommendation is to use avg etc only for alternative store downloads
  
  --
  This seemed like a reasonable sig at the time.
8. Re:Missing key information by Anonymous Coward · 2012-04-11 04:44 · Score: 0
  
  Err... That's completely incorrect.
  There is always the ability to reflash the original firmware or any firmware officially provided by the device manufacturer. Worst case, you throw the update onto the SD and tell it to reflash. For example, here: http://www.motorola.com/Support/US-EN/Android_Products/ATRIX-2_Software_Update_workround can be thrown onto any Atrix without any issue.
  What you're talking about is the ability to flash custom ROMs, which certain models of devices (Moto phones in particular, some older HTC models made last year -- tho they've released the locks, etc.) prohibit. Without the manufacturer signing key (or an exploit, as you mention)
Everyone should be like AC. by Picass0 · 2012-04-09 05:55 · Score: 4, Interesting

I guess nobody ever roots their iPhones to install homebrew software. All of those rooting videos on youtube must be my imagination.
@AC - Just because YOU don't have a need or desire to install software from alternative sources doesn't mean nobody else should. That's not even a platform specific desire. Apple or Android - if you own a smartphone you have a portable computer in your pocket. There will always be people who want to tinker and think outside the box and push the limits of what they can do WITH A DEVICE THEY OWN. They shouldn't have to play by Apple's rules, Google's rules, or yours. It doesn't make them 'fandroids', it makes them curious.
Only available on mysterious alternative markets by sl4shd0rk · 2012-04-09 06:03 · Score: 1

This is not available on AndroidMarket/GooglePlay, so how widespread is it?
"TigerBot hasnâ(TM)t yet surfaced in Google Play (formerly Googleâ(TM)s Android Market) but does appear to be making the rounds on alternative markets." TFA

--
Join the Slashcott! Feb 10 thru Feb 17!
Re:BLAME China ( Again ) ( Score: +10, Interesting by Anonymous Coward · 2012-04-09 06:03 · Score: 0

Oh, sneaky. \o/
Google market "Play Store" search blows by Picass0 · 2012-04-09 06:52 · Score: 1

A app store put together by Google has a crappy search engine. Talk about irony.
When I search for stuff in the Play Store (what a stupid name change) the problem usually isn't no results. The issues is there's no preferences to sort by highest rated or other criteria. Most searches return dozens of hits but it's a mixed bag as far as relevancy.
Ur presence is requested by Anonymous Coward · 2012-04-09 08:03 · Score: 0

BOTH here http://news.slashdot.org/comments.pl?sid=2772023&cid=39621921 + here http://news.slashdot.org/comments.pl?sid=2772023&cid=39621993 (good luck you need it).
1. Re:Ur presence is requested by Rasperin · 2012-04-09 08:42 · Score: 1
  
  Replied.
  
  --
  WTF Slashdot, why do I have to login 50 times to post?
No, U avoided 3-4 questions by Anonymous Coward · 2012-04-09 10:05 · Score: 0

They're asked of you again, here http://news.slashdot.org/comments.pl?sid=2772023&cid=39623777
and here
http://news.slashdot.org/comments.pl?sid=2772023&cid=39623897
Rasperin ADMITS HE WAS WRONG? by Anonymous Coward · 2012-04-09 12:26 · Score: 0

YOU ADMIT ERROR: U FAILED -> http://news.slashdot.org/comments.pl?sid=2772023&cid=39624889 U FAIL, troll, badly... admitting you failed.
The end result Rasperin... by Anonymous Coward · 2012-04-09 13:28 · Score: 0

"Accepted that I was wrong that Hilton.com IS using Windows." - by Rasperin (1034758) on Monday April 09, @06:25PM (#39624293) Don't come in here calling others shit, shill, or troll again (or you'll get the SAME result, again). You've been fairly warned.
The result of ur reply, Rasperin? by Anonymous Coward · 2012-04-09 13:30 · Score: 0

"Accepted that I was wrong that Hilton.com IS using Windows." - by Rasperin (1034758) on Monday April 09, @06:25PM (#39624293) Don't come in here calling others shit, shill, or troll again (or you'll get the SAME result, again). You've been fairly warned.
Re:Android is .. ?. by Anonymous Coward · 2012-04-10 04:05 · Score: 0

How do I "by" something? I'm at a loss.