Android Trojan records conversations, can send them to bad guys
Summary: A new Android Trojan that can log calls, record whole conversations and even send them to the bad guys has been discovered by security firm CA.
A new Android Trojan that can log calls, record whole conversations and even send them to the bad guys has been discovered by security firm CA.
Earlier Trojans have been capable of logging call details, but this is the first one seen that can actually make a complete recording of the conversation.
After the malware finds itself onto a Android handset, it asks for a whole bunch of permissions - which should raise a number of red flags.
Once the malware is given the required permissions by the user, it installs a configuration file that contains remote server access information.
Now it's ready to start recording conversations, which are stored on the microSD card in .AMR files.
Best defense against this sort of malware is to pay attention to the permissions that the app is asking for. Ask yourself - does this app really need all these capabilities? If in doubt, say no!
Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.
Talkback
Message has been deleted.
RE: Android Trojan records conversations, can send them to bad guys
Oops your reputation was at stake and now it is gone ;)
RE: Android Trojan records conversations, can send them to bad guys
RE: Android Trojan records conversations, can send them to bad guys
RE: Android Trojan records conversations, can send them to bad guys
RE: Android Trojan records conversations, can send them to bad guys
That's nice, except you presume the malware is distributed through Google's app store. The article doesn't say that. There are other app stores (e.g. Amazon) and any site can provide an app. If the user has indicated the system can get apps from non-Google sources, it can be anywhere.
So ok, can you tell me that applications installed to Linux from ANYPLACE are malware free?
No, oh mighty "linux advocate", you can't.
RE: Android Trojan records conversations, can send them to bad guys
By that I mean you have to "install" it to do any harm. Do you honestly think there is no way to get non Jobs approved apps onto an iPhone?
RE: Android Trojan records conversations, can send them to bad guys
I refer you to ZDNet, same columnist:
http://www.zdnet.com/blog/hardware/how-much-more-malware-is-lurking-in-linux-official-repositories/8615
Message has been deleted.
RE: Android Trojan records conversations, can send them to bad guys
Switch to iPhone, problem solved.
Switch to a non-smartphone. problem solved.
Source of Malware?
I can't verify the source, can you?
If it isn't in the Android Market, then 'caveat emptor' Folks
Except that the appeal of Android was that you weren't
RE: Android Trojan records conversations, can send them to bad guys
Maybe you just didn't make any point.
RE: Android Trojan records conversations, can send them to bad guys
RE: Android Trojan records conversations, can send them to bad guys
RE: Android Trojan records conversations, can send them to bad guys
So what you are stating is that a closed source, proprietary system is more secure than an open platform?
Message has been deleted.
RE: Android Trojan records conversations, can send them to bad guys
Hmm, why didn't you ask the same when there was outrage about Malware on OSX and Windows? Where were you and what were you doing then? Once the system (any system for that matter) allows side loading, you really can't blame user because the system providers should go extra mile to think about users that have no clue about security and other and make sure it is secured.
RE: Android Trojan records conversations, can send them to bad guys
The User Is the Only One to Blame
If someone is willing to install anything from anywhere, then they can't be protected without handcuffs. I'd rather be savvy to the dangers than be handcuffed.