Slashdot Mirror
Researchers Uncover Android Malware With Never-Before-Seen Spying Capabilities (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: According to a report published Tuesday by antivirus provider Kaspersky Lab, "Skygofree" is most likely an offensive security product sold by an Italy-based IT company that markets various surveillance wares. With 48 different commands in its latest version, the malware has undergone continuous development since its creation in late 2014. It relies on five separate exploits to gain privileged root access that allows it to bypass key Android security measures. Skygofree is capable of taking pictures, capturing video, and seizing call records, text messages, gelocation data, calendar events, and business-related information stored in device memory. Skygofree also includes the ability to automatically record conversations and noise when an infected device enters a location specified by the person operating the malware. Another never-before-seen feature is the ability to steal WhatsApp messages by abusing the Android Accessibility Service that's designed to help users who have disabilities or who may temporarily be unable to fully interact with a device. A third new feature: the ability to connect infected devices to Wi-Fi networks controlled by attackers. Skygofree also includes other advanced features, including a reverse shell that gives malware operators better remote control of infected devices. The malware also comes with a variety of Windows components that provide among other things a reverse shell, a keylogger, and a mechanism for recording Skype conversations.
No that'd be NSA/Googlesoft :)
1 - How can I tell if I'm infected?
2 - Where can I get it?
3 - How much does it cost?
for testing purposes...
"Known"? The Annoying Orange claiming something is now "known"?
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
... and let me guess, 90%+ of Anrdoid devices today will never receive updates that close all the exploits this thing takes advantage of.
Android: For when you want to receive only semi-regular security updates for only a handful of models from a few manufacturers for a few years tops.
But Rick, you can't be one of the cool kids if you don't have one!
But Rick, you're a luddite if you don't have one!
But Rick, you're not interesting enough for anyone to spy on!
But Rick, you're obviously paranoid and wearing a tinfoil hat, you should just calm down and get one anyway!
..and all the other lame-ass crap people post when I say this.
If you want what's left of your privacy, and actual data security preserved, GET RID OF YOUR SMARTPHONE!
Your local government(s) exactly want you to think that way, so that you don't use those tools that would detect their malware. They can silence local tool vendors using National Security Letters. But not these kind of foreign ones.
If you read the story, mostly Italians are infected, with a malware made by Italian company and likely used by Italian intelligence agencies...
And less like a warning for a product that you can apparently find by looking towards an Italian Security company.
-Remember that internet thing? It didn't end well.
While I was less than thrilled about Apple's lack of transparency over slowing down the older phones, I thought that all things considered, their efforts were still lengthening the useful life of the devices impacted. Working slower is better than not working, period.
File under 'M' for 'Manic ranting'