Android malware makes use of steganography
Summary: Malware makers are turning to quite sophisticated tricks to disguise the true purpose of rogue applications.
Security firm F-Secure have released details on how Android malware makes use of steganography to hide the control parameters for rogue code.
First, what is steganography? It's the technique of hiding messages within something else, in this case, an icon file.
F-Secure first suspected that Android malware was making use of steganography when researchers came across this line of code:
Image credit: F-Secure
Further digging revealed more code, and it soon became clear that the image file being referenced here was the icon file bundled with the rogue application:
Image credit: F-Secure
So what's this hidden information used for? It's used to control how and when premium rate SMS messages are sent from the victim's handset, which, as far as the bad guys are concerned, is the primary purpose of the rogue application.
You've got to admit, that's a pretty clever use of steganography.
Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.
Talkback
RE: Android malware makes use of steganography
RE: Android malware makes use of steganography
Better yet
You too?
Take a number.
Don't kill them...
Then lock them up
I can think of precious few, more heinous forms of punishment.
Brought to you by Linux
RE: Android malware makes use of steganography
Not working try harder.
Android is Linux
You guys shout that loud and clear every opportunity you get. This is a Linux problem. Even DTS insists that you all install AV on your mobile Linux devices because Linux is clearly a poorly designed OS. A well designed OS doesn't require AV.
Unless you want to use the marketshare argument?
Is Linux only being targeted because it has the largest marketshare? Please, I dare you, use the marketshare defense.
RE: Android malware makes use of steganography
Ignorance on the order of Lovey.
RE: Android malware makes use of steganography
There are NO OS which can protect from all viruses. There are simply NO WAY AT ALL to algoritmically detect ALL code that is malicious. That is simply because the definition of "malicious" is hard to define. Even a perfectly fine app and service can become malicious without a single line of code changing on the phone, just by a change of ownership of the service.
How do you protect against that? By letting Apple (who didn't notice the exploit in Moxie Marlinspike's app) protecting you? LOL!!!
RE: Android malware makes use of steganography
So what I'd like to see - for the record mind you - an answer to a very simple question: [i]Is Android Linux[/i]? If it is then toddybottom's post - as much as I hate to acknowledge it - has some relevance but if it's NOT Linux then this whole "Android is Linux" thing needs to stop right here and now. It cannot be had both ways.
RE: Android malware makes use of steganography
So bringing up an issue that was relevant about a year ago proves what exactly? Come on dude this is the whole "If X has a vulnerability I can cover that vulnerability by steering the convo to Y's vulnerability" misdirection ploy. Not working BTW. Also Apple released a fix for that PDF issue shortly after the jailbreaking community did.
What else ya got?
RE: Android malware makes use of steganography
It is not the operating system. If you allow code to run on any operating system and keep pressing "Yes or OK" through all the warnings, you will get infected. If you are comparing Android to Apple, the difference is the App store, where Apple checks the apps before they go into the store.
Unless it is Windows
"It is not the operating system."
Then all malware is the fault of the OS. At least this is what Linux fanbois have been saying for years.
No. I don't buy it. Any OS that requires AV (like Android does, according to our local Linux advocate DTS) is a poorly designed OS. That means Linux is a poorly designed OS with no security.
RE: Android malware makes use of steganography
You made a mistatement. Therfore you can't speak english.
RE: Android malware makes use of steganography
Liar. What they've been saying is that the typical virus and worm can't spread on a secure OS. HOWEVER, there are NO defences against TROJANS that the USER LETS IN. Compare it to letting a thief into you house and then complaining about that the alarm system that you just disabled don't work. No court will ever judge in your favor.
RE: Android malware makes use of steganography
If you want to suck your thumb and believe that Apple has your back, sleep well. For the rest of us, I would follow the many others suggesting that NO O/S is so secure that you don't need to protect yourself.
You do no one a favor by suggesting it is OK to rely on the O/S to protect you from doing dumb things.
RE: Android malware makes use of steganography