Turning good Android apps bad

Powered by SC Magazine
 

Unregulated market a dangerous place.

Legitimate Android applications can be easily repacked with malware and uploaded to the Google Marketplace, Symantec says.

The Android application package file (apk) tool Geinimi allowed legitimate apps to be re-written with malicious code.

Applications were then ready to be uploaded since they were self-signed, Symantec security response engineer Mario Ballano Barceno said.

Geinimi created a connection to the command and control centre (C&C) from where information on a victim's device including operating system details and personal data could be downloaded.

Ballano said any application could be affected and re-uploaded.

He said website redirections could be added to web browsers, and phones could be made to place premium  phone calls and SMSes.

“The attacker implements a set of changes and they suggest the changes,” Ballano said.

Symantec security response senior security operations manager Orla Cox said all applications can be compromised.

“If they're using the same malware all of the time, anti-virus vendors can easily handle that. Google is also pretty swift in pulling down known malicious apps from the official market store once it knows about them,” Cox said.

“It's better for the attackers to be stealthier and fly under the radar if they can. It means that their apps are more likely to last on the market.”

This article originally appeared at scmagazineuk.com

Copyright © SC Magazine, US edition


Turning good Android apps bad
 
 
 
Top Stories
Windows 10 lands in Australia
Campaign to get business to upgrade kicks off.
 
NSW to build its own myGov
Service NSW digital profiles available by September.
 
Android bug leaves a billion phones open to attack
Hackers only need phone number to target devices.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
The 5 Windows 10 privacy issues you should be aware of
Jul 31, 2015
There are a few unsettling details when it comes to Windows 10 privacy
Windows 10 is here! (For some)
Jul 29, 2015
Delivery of the free upgrade versions of Windows 10 began today - have you got yours yet?
Microsoft reveals Microsoft Send, a new enterprise chat app to rival Slack
Jul 27, 2015
Microsoft Send is MSN Messenger for grownups, and you could be using it at work very soon
Developers offered $500,000 grants to find HoloLens uses
Jul 8, 2015
Can augmented-reality end up in business?
Microsoft Tossup: The planning app for unorganised groups of friends
Jul 8, 2015
App allows friends to research venues, vote on plans and chat. And depending on how you run your ...
Latest Comments
Polls
Should law enforcement be able to buy and use exploits?



   |   View results
Yes
  14%
 
No
  51%
 
Only in special circumstances
  17%
 
Yes, but with more transparency
  18%
TOTAL VOTES: 767

Vote