The BlackPage

January 23, 2006

The BlackPage highlights breaking security research submitted by leading corporate professionals, government experts, and members of the underground hacking community.


On The BlackPage: Disinfecting Your Phone Without Lysol?
by Jeff Moss posted January 23, 2006

I suggest securing your smart phone before attending Black Hat Federal next week or any other time you go out. Sophisticated attackers are now starting to concentrate on mobile platforms. We will soon see attacks going from primitive to advanced, especially considering almost all “important” people now own a smart phone.

Jarno Niemelä focuses his latest research on the Symbian OS. He has analyzed a number of primitive malware to date, what does it look like, where is it going, and how to get rid of it, which is not always easy.


Mobile Malware

by Jarno Niemelä posted January 23, 2006

Symbian malware, can it all be blamed on stupid users installing stuff?

During the past year, there has been quite a lot of publicity about viruses and worms that can infect Symbian-based phones. Also during that time there have been quite a few public opinions, which claim that the Symbian virus problem is greatly over hyped and users are to blame as the phone asks yes/no questions several times during installation of Cabir or other Symbian worm.

But is it really so easy? Us technologists like to blame users for being stupid or ignorant. But most often that is just an easy way out of uncomfortable problem.

Yes, it is true that the phone asks questions several times before Symbian malware is installed into a phone. But these questions could be written in a much more understandable way. Plus, just opening a bluetooth message in the phone inbox should not automatically start installation of whatever arrived in the message.

One has also to remember that people, who want their worms to spread and infect as many phones as possible, create Symbian worms. Thus the worm authors try to use the Symbian features in such a manner that forces users to answer “yes” for all questions.

For example, Cabir uses the tactic of constant bluetooth file transfer requests, thus bombarding the user with endless yes/no questions, and frustrating the user until he starts answering yes all the time.

This behavior can be demonstrated in this video.

upcoming events

USA Briefings & Training 2007
July 28-August 2
Las Vegas

Japan Briefings & Training 2007
October 23-26
Tokyo

DC Briefings & Training 2008
February
Washington DC Area

Europe Briefings & Training 2008
March 25-28
Amsterdam

USA Briefings & Training 2008
August 2-7
Las Vegas

the BlackPage Archives

See past BlackPage articles.


the BlackPage archives

Black Hat Logo
(c) 1996-2007 Black Hat