Slashdot Mirror
Android Backdoor 'GhostCtrl' Can Silently Record Your Audio, Video and More (neowin.net)
An anonymous reader quotes a report from Neowin: A new strain of malware designed for Android devices has recently been discovered, which not only can silently record audio and video, but can also monitor texts and calls, modify files, and ultimately spawn ransomware. Dubbed as 'GhostCtrl' by researchers over at Trend Micro, the malware is apparently a variant of OmniRAT, a remote administration tool for Android, which is available to the public. It also appears to be part of a wider campaign that targeted Israeli hospitals, where a worm called RETADUP surfaced back in June. According to the report, there are three versions of the malicious software. The first variant stole information and controlled a device's functionalities, while the second added new features to exploit. The third one combines all the features of the old versions, and adds even more malicious components into its system. The latest iteration of GhostCtrl can now monitor call logs, text messages, contacts, phone numbers, location, and browsing history. Furthermore, it has the ability to record the victim's Android version, battery level, and Bluetooth information. To make make matters worse, it can now also spy on unsuspecting victims by silently recording audio and video. The malware distributes itself via illegitimate apps for WhatsApp or Pokemon GO. Trend Micro suggests you keep your Android devices up to date and data backed up regularly. They also recommend using an app reputation system that can detect suspicious and malicious apps.
The list of thing the malware purportedly can do is an amusing mix of the frightening and the laughable. If the malware can install ransomware and record audio and video secretly, do you need to also inform us in the same sentence that it's capable of also recording your battery level for evil purposes?
Now, what's so bad about Apple's walled garden again?
A quick google about malware on iPhones suggests you are full of shit
Time for bed, said Zebedee - boing
Thanks Trend Micro for that advice! Except most tablet vendors stop supporting or changing the software on the tablet so unless you could have put Canyogenmod on the tablet you won't be able to upgrade. Oh wait. You can't even get cyogenmod as an update anymore. The software upgrade path is the only positive thing Apple has going for its tablets.
Perhaps Microsoft tablets will be upgradeable like the zune has been updated?
BTW anyone catch the averts for HP printers? Pointing out how old printers are insecure and you should just upgrade to HP? 'Cept the old insecure printers that still work are HPs. Still working is the point. If the sunk cost gear is still working - why replace it due the manufacturer not creating the replacement need by allowing insecure devices to function on the network?
Ahahahaha. Madness.
GhostCtrl is not a bug, it's a new daemon for systemd. It's meant to provide a centralized method for viruses and ransonware to control your system.
There's an apple vs. android debate going on here. And while I myself use an android phone, I have to say, Apple does have the edge in this department. Their lockdown and app-screening policy basically prevents clueless users from doing to much damage.
And I have to admit, finding the right Android phone is a PITA. I settled for a Moto G5 Plus as my newest, but I'm and expert and know what to look for, am aware of the tradeoffs *and* I know enough to be careful about installing rubbish. Some clueless ord settling for an iPhone even though it's 300 Euros more expensive than an android equivalent (a fact they are blissfully unaware of) might actually be the best choice for them.
We suffer more in our imagination than in reality. - Seneca
female nature is collectivist, don't blame the politicians for it, they're just doing it for access to v@g1n@ (simps)
go MGTOW and watch the world burn from afar
they can't really hack old phones that don't even have color screens, can they? even if they can it's not worth the effort
Why I chose an operating system platform that was open sourced. Not free but freed software. It seems the further software gets from being open the more we have to put up with crap like this. Sure, shiny is good, but control is better.
My ism, it's full of beliefs.
I just have to say, thanks for advertising this tool. Now I can admin my family without having to constantly travel, get them to meet me, get the phones, etc. It is cheap and well.. the developer is the owner. Pretty nice job so far.
Amazing: Try and make it sound bad.. and I love it.
I can program myself out of a Hello World Contest!!
Am I the only person who turns off Android and apps updates on each brand new Android phone because after while they make the phone sluggish?
Not that I've RTFSummary, but isn't this functionality already covered by the Maxx's Modules available in FDroid? What exactly is new here other than it's bad when your computing device is running software with functionality you don't wish it to have? Malware 101? Is slashdot that remedial a forum lately?
According to TFA: "The malware is distributed through apps that masquerades as legitimate apps for WhatsApp or Pokemon GO. After the APK file has been installed on a victim's device".
While I have no idea what "apps for Whatsapp or Pokemon GO" means (maybe "for" should be "as"), the second part about installing the APK suggests that this happens when a user "sideloads" (I hate the term, implies there's something wrong with it, as if we were only ever supposed to install programs blessed by the OS corporate overlords) an app, In turn, this suggests that you'd be fine if you stuck to what's available on Google Play.
My point is, this is not a problem caused by an OS level vulnerability so no amount of updating the OS will fix it.
Yes, Android is atrocious regarding updates but that's another problem.
Android? The OS itself is OK and has no issue with updateability. Don't you mean "the great collective of Android phone manucaturers"?
the old insecure printers that still work are HPs
Red: This printout is a little more yellow than I'd expect.
Wolf: The better to protect you from committing crimes anonymously with my sweetie.
https://www.eff.org/pages/list-printers-which-do-or-do-not-display-tracking-dots
Red: My last ink cartridge sure was expensive.
Wolf: The better to lock you in as a return customer my sweetie.
http://wirthconsulting.org/2016/04/18/hp-inc-wins-ink-cartridge-patent-infringement-suits-across-the-globe/
https://www.cnet.com/news/hp-cracks-down-on-cartridge-refill-industry/
http://www.zdnet.com/article/hp-told-disarm-printer-ink-self-destruct-sequence-blocking-third-party-cartridges/
Eventually what we see today as a "printer" will become a paper holder and mover with a network adapter. The actual "printer" will be a cartridge protected by patent, DMCA, and EULA that is leased from a company instead of bought.
Good color laser and inkjet printers have been widely available since the early 90's. Anyone want to take a kickstart shot at unencumbered printer hardware that supports open firmware technology?
One more reason why we need hardware on/off switches and indicator lights for sensors and radios.
Turn the mic off - it will be impossible to record.
See that the mic-indicator light off - assurance mic is not in use.
Ditto camera, bluetooth, wifi, cellular radio, etc.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Depends on the manufacturer. I have a BQ and I have no issues with a lack of updates. (The Zuk Z1 before that was a different story altogether, admittedly. To be fair, though, that was because Zuk made the mistake of partnering with Cyanogen Inc.)
Unfortunate as it is, the presence or lack of a solid update scheme is a distinguishing feature between manufacturers - one you won't find in a feature matrix. Looking into it can help you avoid making mistakes.
USE HOT GRITS WITH STATUE OF NATALIE PORTMAN (NAKED AND PETRIFIED)
They sound pretty 'dumb' to me, if they're vulnerable to bullshit like this. Why are you people still using smartphones? Drop them into the e-waste bin and get a PHONE that is just a PHONE and never mind this nonsense. It's not like you're actually using it for legitimate purposes, all you're doing is jacking off on 'social media', playing pointless twitch-games, watching porn on the john at work, and paying wireless companies a premium every month for overpriced 'dataplans'. Just admit you don't really need it, dump it, get a $50 basic phone, leave it turned off when you're not using it, and never have to worry about any of this shit ever again. Wireless companies can and should go fuck themselves.
Comment removed based on user account deletion
Ah, the red scare returns. "Bleeding from her wherever".
You shouldn't refer to Steve Bannon like that.
And why allow side channels for installation, e.g. via WhatsApp, if it's got problems like this and no QA?
Because then people like you would be whining about the Google Walled Garden, and we don't like whining.
Sorry, got to call FUD. If you read this,
https://blog.trendmicro.com/tr...
Basically this is an app that requests a ton of permissions, including being a device administrator allowing it to control the lockscreen. The user had to accept several scary warning dialogs for the app to obtain these privileges. They also had to go outside the Play store, and specifically allow untrusted apps to be sideloaded.
TFA states this app can escalate to root, but doesn't explain how that's possible across different versions of Android / Linux and different hardware. I've never heard of a root for Android that involves simply installing an app, let alone a universal one.
Comment removed based on user account deletion
Okay sure.
Seems perfectly reasonable to have a walled garden, and an option to unlock the phone but then no warranty, support, etc. How's that for whining, fucko?
It sure does seem reasonable, and that's pretty much how Android works now. So I'd have to say pretty poor whining on your part.
And why allow side channels for installation, e.g. via WhatsApp, if it's got problems like this and no QA?
Interesting. What would said QA test? That every single app coded on the face of the planet, even the ones Google or anyone else knows about, aren't malicious? I guess said QA would need to decompile every app and go over every line of code to ensure they aren't doing anything malicious. And if the app used the network, we'd need to get the source to all of the servers it's calling to ensure they aren't malicious either.
I'd really love to hear more about how you think this would work. It really is a practical plan though I'm sure, we just need you to explain more.
but why?
both whatsapp and pokemon go is a free app lol...
You had to Foe me? I guess mom and dad never disagreed with you. It must be quite shocking, I apologize for not handling you more gently.
Pffttt... Them adding you as a foe is a badge of honor. Wear it with pride!
"So long and thanks for all the fish."
Comment removed based on user account deletion