Eavesdropper Android app developed

Powered by SC Magazine
 

Proof-of-concept application siphons audio to remote servers.

Security researchers have built a lightweight Android application that remotely activates a phone's microphone to eavesdrop on conversations.

The proof-of-concept application downloads instructions from a remote server to begin recording conversations when a victim arrives at a specific location.

Attackers could potentially listen in on sensitive conversations by activating the rogue application at target GPS coordinates.

The application was developed by researchers at Sydney-based Sense of Security and will be launched at the AusCERT security event in Queensland next week.

"The aim was to show how easy and plausible it is to spy on an owner through mobile devices," co-founder Murray Goldsmidt told SC Magazine.

He said the Android application was composed of about 600 lines of code and could be ported to other mobile operating systems.

During field tests, the application had recorded around 30 seconds of audio at a specific location and siphoned the data to the company's servers.

The application could be installed on phones by drive-by-downloads or locally.

Goldschmidt will detail the application during his AusCERT Thursday presentation.

Copyright © SC Magazine, Australia


Eavesdropper Android app developed
 
 
 
Top Stories
Beyond ACORN: Cracking the infosec skills nut
[Blog post] Could the Government's cybercrime focus be a catalyst for change?
 
The iTnews Benchmark Awards
Meet the best of the best.
 
Telstra hands over copper, HFC in new $11bn NBN deal
Value of 2011 deal remains intact.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  39%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  7%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  14%
 
A State Government agency (Health dept, etc)
  6%
TOTAL VOTES: 1777

Vote
Do you support the abolition of the Office of the Information Commissioner?