Turning good Android apps bad

Powered by SC Magazine
 

Unregulated market a dangerous place.

Legitimate Android applications can be easily repacked with malware and uploaded to the Google Marketplace, Symantec says.

The Android application package file (apk) tool Geinimi allowed legitimate apps to be re-written with malicious code.

Applications were then ready to be uploaded since they were self-signed, Symantec security response engineer Mario Ballano Barceno said.

Geinimi created a connection to the command and control centre (C&C) from where information on a victim's device including operating system details and personal data could be downloaded.

Ballano said any application could be affected and re-uploaded.

He said website redirections could be added to web browsers, and phones could be made to place premium  phone calls and SMSes.

“The attacker implements a set of changes and they suggest the changes,” Ballano said.

Symantec security response senior security operations manager Orla Cox said all applications can be compromised.

“If they're using the same malware all of the time, anti-virus vendors can easily handle that. Google is also pretty swift in pulling down known malicious apps from the official market store once it knows about them,” Cox said.

“It's better for the attackers to be stealthier and fly under the radar if they can. It means that their apps are more likely to last on the market.”

This article originally appeared at scmagazineuk.com

Copyright © SC Magazine, US edition


Turning good Android apps bad
 
 
 
Top Stories
AGL restructure sees CIO depart
Owen Coppage to leave after ten years.
 
Data: Advertising's best frenemy
STW Group's Tom Ceglarek faces a digital conundrum: he must feed his client's demand for performance insights while his industry is being undermined by data analysis.
 
Inside Telstra's multi-faceted cloud strategy
An overview of its own cloud and deals with Cisco, VMware, IBM and NextDC.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Small business win in a budget with 'fair' savings: Abbott
Apr 17, 2015
Tony Abbott has reaffirmed that the government’s aim is “always to get taxes ...
Xero now includes an inventory function built-in
Mar 26, 2015
Xero has added inventory and other major new features to the latest release of its cloud ...
Apple reveals its new MacBook
Mar 13, 2015
Replacing the MacBook Air as Apple's thinnest laptop, the new MacBook comes packed with features.
Xero has released a new version of its app for the iPad
Mar 6, 2015
iPad-wielding Xero users can now take advantage of a new version of the iOS app for the cloud ...
Microsoft is offering Azure for Disaster Recovery to Australian SMBs
Feb 10, 2015
If you haven't talked to your IT provider about disaster recovery, it might be worth discussing ...
Latest Comments
Polls
Do you support the Government's data retention scheme?

   |   View results
Yes
  11%
 
No
  89%
TOTAL VOTES: 2130

Vote