Forest Global Training Partners

Cyber Risks · Krebs on Security

Toward A Greater Mobile Mal-Awareness

Summary: Symantec warned about a new point-and-click 'binder' called Androrat APK Binder that Trojanizes legitimate Android apps with the open-source AndroRAT remote access Trojan, which can monitor calls and SMS, get GPS coordinates, activate the camera and microphone, and access stored files; Symantec has detected only a few hundred AndroRAT infections worldwide. Symantec also found two malicious Android apps in the wild exploiting the 'Master Key' vulnerability disclosed by BlueBox Security, which affects any Android device released in the prior four years - nearly 900 million devices - and lets attackers convert almost any app into a Trojan without altering its cryptographic digital signature.

What you should know: BlueBox shared the bug with Google in February 2013, but fixes depend on device manufacturers producing firmware updates and users installing them, with availability varying by manufacturer and model - leaving nearly 900 million devices exposed while that chain plays out.

Read the original at Krebs on Security ↗

Topics
Malware
Related