First drive-by Android malware detected

Powered by SC Magazine
 

Malware writers "even lazier than before".

The first mobile malware infection via drive-by-download has been detected.

The Android trojan was detected by Symantec researchers delivered through a fake security update hosted on malicious websites.

Drive-by-download transmitted malware to a victim's computer when victims visited infected web pages, but users still had to accept permission prior to installing.

“This is more of a social engineering attack,”  Symantec Security Response Center operations director Liam O Murchu said. “At the end of the day, the user still needs to see a message and decide if it's something that they want to install or not.”

Infected devices may be used as a proxy to authorise attackers to route traffic, O Murchu said.

Trojans that have invaded mobile devices were typically used for financial gain or to access personal data, but the intent of the malware was unclear.

“Maybe they have a scheme in mind that they want to use these phones for at a later point,” he said.

Trail of Bits chief executive Dan Guido said the attack was "not surprising".

“In this case, they are just reusing someone else's website instead of running it off their own. If anything, this proves they are even lazier than ever before,” he said.

The number of victims was also unknown, but there were almost 1000 compromised sites pushing the trojan, according to O Murchu.

Android's mobile operating system was the platform of choice for criminal activity. This was aggravated by marketplaces outside of the official Android app store, Google Play, that allowed users to install  applications which host malicious code.

“That was how a majority of the threats we saw last year were being distributed through Android,” O Murchu said.

Juniper's 2011 security report found that Android malware jumped 3325 percent compared to 2010.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition


First drive-by Android malware detected
Credit: Flickr
 
 
 
Top Stories
Photos: iTnews Benchmark Awards countdown begins
Just a few days left until entries close for 2014.
 
Australian Govt to rethink cyber security strategy
Six-year old policy to be refreshed.
 
The failure of the antivirus industry
[Blog post] Insights from AVAR 2014.
 
 
Credit: Flickr
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  7%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 1037

Vote