May 18

Facebook and Adndroid top malware targets

Android plagued with malware

Android smartphones rock, but whether you use Avast, Lookout, the new Sophos, or another freebie antivirus/security app, you better lock and load to protect your Android before you become a victim and a stat.

Android, once dubbed a “cyber menace,” is too popular, too juicy and potentially too lucrative of a target for malware writers to ignore. In fact, a new F-Secure report suggests malware writers are getting craftier by creating trojanized apps that can defeat anti-virus detection. F-Secure released its latest mobile threat report [PDF] concerning the first quarter of 2012 and Android malware has grown exponentially. Since a year ago, the number of new malware variants have quadrupled and the number of malicious Android application package files (APKs) had a “staggering” increase of “139 to 3063 counts.”

Facebook target of malware campaign

A new fraud campaign aims to separate users of Facebook, Google Mail, Hotmail, and Yahoo from their debit card data.
We’ve recently discovered a series of attacks being carried out by a P2P variant of the Zeus platform against some of the Internet’s leading online services and websites.

The Facebook scam offers people a 20% discount if they link their Visa or MasterCard details to their Facebook account. “The scam claims that after registering their card information, the victim will earn cash back when they purchase Facebook points,” said Klein. A fake Web form then requests that the user enter their debit card number, its expiration date, as well as their security code and PIN.

In the Gmail, Hotmail, and Yahoo variations, the scam “offers an allegedly new way of authenticating to the 3D Secure service offered by the Verified by Visa and MasterCard SecureCode programs,” said Klein. In particular, the scam suggests that Google and Yahoo users can tie the 3D Secure password issued by their bank to, respectively, their Google Checkout and Yahoo Checkout accounts. It then requests the person’s debit card number, expiration date, security code, and 3D Secure PIN code. For Hotmail users, attackers have tweaked the language slightly to suggest that without the 3D Secure code being entered, users won’t be able to use Hotmail to make any purchases.

 

Sponsored by osxantimalware.com – antivirus for mac

Apr 23

Android Malware disguised as Instagram App

Cashing in on the popularity surrounding popular photo-sharing application Instagram, a number of fake versions of the app are doing the rounds online.

Cyber criminals have created fake versions of the Instagram Android app, designed to earn money from unsuspecting users.
When users download the Instagram app from anywhere other than the official Google Play store, or directly from the Instagram Web site, they are running the risk of infecting their smartphones with malware.

One example is a Russian Web site that mimics the look of the Instagram site, and offers users a free download.
The resulting download is a malicious app that seems to be relying on the sending of background SMS messages to earn its creators revenue.

Recently, users looking to download Angry Birds Space were also being targeted. Other popular smartphone apps being used in the scheme are Fruit Ninja, Temple Run and Talking Tom Cat.

Mar 27

Android Denial of Service Exploit

A team of Italian researchers has discovered and patched a Denial of Service (DoS) vulnerability in the Android operating system which could allow attackers to render a device “totally unresponsive”.

An exploiting application targets the Zygote socket in the OS’ Linux layer by forcing the system to fork, thereby flooding it with a large number of requests for dummy processes and using up all of the device’s memory resources.