New android malware - Vibrant General

http://www.ubergizmo.com/2012/09/new-naval-app-secretly-recreates-environments-from-your-phone/
The Naval Warfare Surface Center in Crane, Indiana today revealed a smartphone app that puts the capability of modern smartphones to observe areas in sharp relief and shows the power of malware to tap into those capabilities. The app, PlaceRaider, is capable of running in the background of any smartphone running Android 2.3. While running in the background, it takes photos at random while recording the orientation and location of the phone. Those photos get sent back to a central server, where they can be used to reconstruct a pretty good idea of where the phone has physically been.
Click to expand...
Click to collapse
What do you guys think?

I'm gonna do it to my every single one of my friends and creep on them.

At least with Android it will eventually be found and will be a fix or a way to prevent it, who knows what Apple is doing with iOS and even if the problem is founded, one would have to wait for Apple to patch a bug, but only if they choose to.
http://news.cnet.com/8301-13579_3-20014356-37.html
In some embodiments, an unauthorized user can be detected by comparing the identity of the current user to the identities of authorized users of the electronic device. For example, a photograph of the current user can be taken, a recording of the current user's voice can be recorded, the heartbeat of the current user can be recorded, or any combination of the above. The photograph, recording, or heartbeat can be compared, respectively, to a photograph, recording, or heartbeat of authorized users of the electronic device to determine whether they match. If they do not match, the current user can be detected as an unauthorized user.
Click to expand...
Click to collapse
The linux kernel have the iptables as firewall, if you are rooted, you can use DroidWall to manage it, not even that spying app can get any internet. Personally, I always manage which app gets internet access on my device.

eksasol said:
At least with Android it will eventually be found and will be a fix or a way to prevent it, who knows what Apple is doing with iOS and even if the problem is founded, one would have to wait for Apple to patch a bug, but only if they choose to.
http://news.cnet.com/8301-13579_3-20014356-37.html
The linux kernel have the iptables as firewall, if you are rooted, you can use DroidWall to manage it, not even that spying app can get any internet. Personally, I always manage which app gets internet access on my device.
Click to expand...
Click to collapse
Very nice tip! I downloaded DroidWall and it does exactly as you say!
Thanx!

However, with DroidWall you need to enable all the system apps and services, otherwise you'll start finding things like PlayStore not working.
If using DroidWall gets confusing LBE Security Manager also have internet firewall, but it doesn't utilize the same method, DroidWall works at the kernel level and will override LBE. Although LBE is also a very essential app. It can monitor how much data each app uses as well and set the permission for each app. Although if you flash roms all the time it gets tiresome to configure after each flash, also you have to know which permission to enable for some apps to not interfere with its normal functions.

Dear hacker guy,
Good luck reconstructing the images and dimensions of my butt pocket.
-signed dgaf user
Sent from my SGH-T959

suchavibrantthang said:
Dear hacker guy,
Good luck reconstructing the images and dimensions of my butt pocket.
-signed dgaf user
Sent from my SGH-T959
Click to expand...
Click to collapse
?????

Related

com.smithmicro.DM running around 70%

My hero seems to be a bit slower than usual. I stared up astro file manager and used their process tool to show that com.smithmicro.DM is running at around 70%. Why would this process be using so much CPU and is there any way to alleviate the cpu processing being done?
what does com.smithmicro.DM do anyways? I mean, if it's nothing too important, you could always remove it.
i dont know, but i thought i read this was to be on the ignore list as it manages the data between your phone and your SD card.
I pulled the battery on my phone, and so far it looks a bit better.
it's causing my update PRL/Profile to crash and cause weird bugs (i.e. PRL showing 26762 or something random until a profile update/crash).
damage r3
mrinehart93 said:
what does com.smithmicro.DM do anyways? I mean, if it's nothing too important, you could always remove it.
Click to expand...
Click to collapse
Here is some info you may want to read.
The DM Suite makes it easy for you to:
Activate, configure, and provision new devices for consumers and enterprises
Manage mobile applications
Secure devices and sensitive data
Personalize the customer experience
Diagnose problems
Update firmware
Offer a customer self-care web portal
Control device capabilities
Manage GSM and WiMAX devices
Automate custom device activation workflows
Extend Mobile Device Management (MDM) with web services
animal7296 said:
Here is some info you may want to read.
The DM Suite makes it easy for you to:
Activate, configure, and provision new devices for consumers and enterprises
Manage mobile applications
Secure devices and sensitive data
Personalize the customer experience
Diagnose problems
Update firmware
Offer a customer self-care web portal
Control device capabilities
Manage GSM and WiMAX devices
Automate custom device activation workflows
Extend Mobile Device Management (MDM) with web services
Click to expand...
Click to collapse
hope i dont get slammed, bump!
this description was the best ive seen!
what is the name of the actual .apk file? did anybody try removing this apk? did it have any adverse effects?
thanks!
From the sound of this info, it seems that the app probably isn't totally necessary. App name coming soon. Do a nandroid, remove the apk, and reboot. If nothing is wrong, then we know we can remove it safely. Do some testing, like download a file from the internet to your SD card. That would be the only thing that concerns me about this app. App name coming soon, again.
what does com.smithmicro.DM do anyways? I mean, if it's nothing too important, you could always remove it.
Click to expand...
Click to collapse
Here is some info you may want to read.
The DM Suite makes it easy for you to:
Activate, configure, and provision new devices for consumers and enterprises
Manage mobile applications
Secure devices and sensitive data
Personalize the customer experience
Diagnose problems
Update firmware
Offer a customer self-care web portal
Control device capabilities
Manage GSM and WiMAX devices
Automate custom device activation workflows
Extend Mobile Device Management (MDM) with web services
Click to expand...
Click to collapse
-------------------------------------
Sent via the XDA Tapatalk App
Try dmservice.apk
I wouldn't remove the dmportread.apk
-------------------------------------
Sent via the XDA Tapatalk App
I guess no one experimented with this?
Shouldn't there be a process website that describes what these processes do?
If you kill the process "com.smithmicro.DM" you will no longer receive over the air firmwear updates. The "DM" stands for device management, and I know for a fact that HTC uses smith micro for their FOTA updating.

Skype for Android Exposes Sensitive User Data to Rogue Apps

Thought I'd post for anyone using this ...
Skype for Android users are potentially at risk for having malicious apps steal sensitive user data from their phone because of incorrectly assigned file permissions
A vulnerability in the way Skype’s Android app locally stores data could potentially exposes users’ sensitive information, an Android developer discovered.
http://www.eweek.com/c/a/Security/S...ses-Sensitive-User-Data-to-Rogue-Apps-117334/
yikes !!
Market reviews already made it clear it was a ****-ass program. I guess this just seals my decision never to install it. Oh well, time is on my side, as the song goes.
just a bump to be sure all that should see it do ...
Skype was updated today to resolve that. Now I just want video calling on it damnit!
I was never able to actually get Skype to log me in, today's update included.
I wont be using it either

This free security app already picked up an app trying to access my contacts!

This free security app already picked up an app trying to access my contacts! I just installed it, didnt have too but rebooted my phone and it picked an app up trying to access my contacts!
Description
This application requires a ROOTed phone, please make sure your phone has been unlocked and ROOTed.
Welcome to use LBE Privacy Guard, the most powerful privacy protection software for Android platform.
With the state-of-the-art API interception technology, LBE Privacy Guard provides great enhancement to Android permission system, now the first time you are able to:
- Protect your privacy by controlling the permission of each application to access your sensitive data.
- Block malicious operation from Mal-wares and Trojans.
- Block unwanted network traffic if you don’t have a unlimited data plan.
- Find out which application is trying to steal your privacy by checking the security log.
- And even more...
LBE Privacy Guard - free
https://market.android.com/details?id=com.lbe.security&feature=search_result
Enjoy
Out of curiosity what was the app that was looking at your contacts?
rstuckmaier said:
Out of curiosity what was the app that was looking at your contacts?
Click to expand...
Click to collapse
+1.
It would be very useful to know.
phone.apk ?
I've already used LBE privacy on my A501 and SGS2, but on A501, it crash randomly.
This app is very useful but have battery consumption on my SGS2.
I've unistalled on all devices .... for the moment
Access to contacts does not mean the app is trying to "steal" your privacy data. You're not mentioning the app's name anyway but it would be nice to do so - there might be an explanation. Let me give you an example of completely harmless app behavior that requires access to your contacts.
Keyboard - some keyboards might offer a contact as a word suggestion when typing an email.
Nanny - a babyphone app, designed to call a predefined number in case your baby starts crying. The app offers to pick a contact instead of entering it manually - that's why it requires an access to your contacts.
Photo app - contact access is required if the program offers an option to share a photo with your friends
I can think of more but need to get back to work
but how do we know
How do we know this app is not stealing the information we install it to do.buyer beware.they give for free.with nothing in return.
Conspiracy. Giggles.
Its probably OK but well do we ever really know.
Im personally a fan of the webroot free app.
I used the beta the moment it came out and have ran it on my desire ever since and now run it on my iconia.
it doesnt touch the battery or give me slow downs, thats why i like it... because it doesnt bug me or drain the phone of power or speed. (the only noticeable thing it does is scan on sd card file operations like copy/delete)

[Q] Anti-Virus, is it really needed?

Hello there chaps & chapettes(?),
I come to you today with a very real and possibly useful question. I come today to ask if there is a need for an anti-virus on smartphones at the moment and to gain an idea of the amount of HD2 users who do use an anti-virus.
So, would you say that there is any real need for an anti-virus? Are there many threats out there for us smartphone users? And do any of you have an anti-virus and if so, which is the one most recommended?
As an IT Engineer, I see many PC deaths attributed to malware of various flavours and I'd rather not see my beloved phone fall folly to these harmful programs.
Thanks for your responses (in advance),
Martin
I personally do not use one, but it depends on personal choice and what you use your phone for really.
Viruses and malware are fairly uncommon on android, but they do exist.
For example if you download a lot on your phone, or try unknown apps in market (viruses have been known to to find their way into the market) then you could maybe look into trying one.
Hope this helped
Sent from my HD2 using XDA app
IMHO, even on a PC, the anti-virus software often causes more harm than good, simply by slowing the system down considerably, especially the file system access, with its background scanning. Most of the viruses those days are stupid user oriented, you have to actually launch the virus/worm yourself for it to infect you. This kind of viruses only requires a tiny bit of common sense to avoid without using any anti-virus software. The other kind use well known network exploits - all i can say about it is "firewall yourself", there is nothing out of the ordinary in the way those viruses initially connect, a simple NAT router should protect you from those. There are also ones that infect you using some kind of browser, or other app exploit, but those are killed off at the distributing server side the moment they are discovered (anti-virus won't help you if you've stumbled upon one of those in zero days). And finally, some of those can be silent, properly coded, totally invisible, getting to you through some unknown exploits, using rootkit methods to hide etc... Those are the kind antiviruses are totally going to miss anyway.
The bottom line is - i don't see much point in using an antivirus on a PC. And you are actually asking me here if i think one should use it on an Android device ? Well, my answer is "No", unless you are a total stranger to some minimal common sense in this area.
I'll state this as someone who even leaves his wifi unlocked at home, but anyway...
My only viewpoint is that the only entry point for Malware is via Market downloads, and by that I mean downloading loads of apps from unknown names. While I know this advice will be disproved long-term, personally I would not bother unless I was silly with downloading apps from strange sources with weird permissions
Sent from my HTC HD2 using XDA App
smeddy said:
I'll state this as someone who even leaves his wifi unlocked at home...
Click to expand...
Click to collapse
I did this too, pretty much isolated from the LAN, though. I've stopped doing it after someone started torrenting on it, and i am not talking occasionally fetching stuff here and there, limiting the BW to some sane values, but heavy, 24/7, bandwidth hogging torrenting.

Is DroidWall still the best firewall for Android?

Traditionally, I have always considered DroidWall the best firewall for Android. But it hasn't been touched in two years.
I use it in Blacklist mode, and I like that apps that have been installed since you last went into the app show at the top of the list.
Is it still considered the best, or is there something better, at this point?
Haphim said:
Traditionally, I have always considered DroidWall the best firewall for Android. But it hasn't been touched in two years.
I use it in Blacklist mode, and I like that apps that have been installed since you last went into the app show at the top of the list.
Is it still considered the best, or is there something better, at this point?
Click to expand...
Click to collapse
I don't really see to much of a reason to use a firewall. Antivirus apps like Bitdefender, Kaspersky, etc. are (in my own opinion) good enough for anything you do on the phone, although there is a lot that can get past it. On another note, I have yet to see an app that truly protects against ARP poisoning. I have tried some paid versions of the apps, but that is something that is very hard to stop and again, in my own opinion, I think it's just a goofy app wasting RAM.
Alright, well to clarify, one major purpose that I use it for is to prevent apps from calling home without my knowledge. So if nothing else, I use it for that functionality.
Haphim said:
Alright, well to clarify, one major purpose that I use it for is to prevent apps from calling home without my knowledge. So if nothing else, I use it for that functionality.
Click to expand...
Click to collapse
That's cool. I would stick to it just because you're familiar with it. I don't think firewalls are that popular right now but I have been wrong before.
Okay, fair enough. Thanks!
Hi, Is there a purpose for a firewall? I mean I know what it does on a PC but I have never had any viruses or hacking happen to me on any of my android devices. Do you suggest it is a must for android users? Thank you
sg3love said:
Hi, Is there a purpose for a firewall? I mean I know what it does on a PC but I have never had any viruses or hacking happen to me on any of my android devices. Do you suggest it is a must for android users? Thank you
Click to expand...
Click to collapse
If for no other reason, it's important to keep apps from calling home when they have no business doing so. So many apps ask for permissions far beyond what they should, and an outgoing firewall is vital to making sure that any information those apps may grab never leave your phone.
Haphim said:
If for no other reason, it's important to keep apps from calling home when they have no business doing so. So many apps ask for permissions far beyond what they should, and an outgoing firewall is vital to making sure that any information those apps may grab never leave your phone.
Click to expand...
Click to collapse
Most definitely! There are other programs (can't think off the top of my head, but will post if I remember) that can modify permissions for all the apps you have. I would think it would be more reliable than a firewall.
agent929 said:
Most definitely! There are other programs (can't think off the top of my head, but will post if I remember) that can modify permissions for all the apps you have. I would think it would be more reliable than a firewall.
Click to expand...
Click to collapse
Unfortunately, not. If an app doesn't have all the permissions the developer intended, there's a decent chance it will crash or otherwise malfunction.
On the other hand, blocking external access is almost always handled gracefully - and it's only a problem for apps whose main function requires net access (like a browser).
Haphim said:
Unfortunately, not. If an app doesn't have all the permissions the developer intended, there's a decent chance it will crash or otherwise malfunction.
On the other hand, blocking external access is almost always handled gracefully - and it's only a problem for apps whose main function requires net access (like a browser).
Click to expand...
Click to collapse
I never thought of it that way, but you are right about the app crashing. It will more than likely keep trying to connect to stuff and ultimately crash.
agent929 said:
I don't really see to much of a reason to use a firewall. Antivirus apps like Bitdefender, Kaspersky, etc. are (in my own opinion) good enough for anything you do on the phone, although there is a lot that can get past it. On another note, I have yet to see an app that truly protects against ARP poisoning. I have tried some paid versions of the apps, but that is something that is very hard to stop and again, in my own opinion, I think it's just a goofy app wasting RAM.
Click to expand...
Click to collapse
agent929 said:
Most definitely! There are other programs (can't think off the top of my head, but will post if I remember) that can modify permissions for all the apps you have. I would think it would be more reliable than a firewall.
Click to expand...
Click to collapse
From a noob perspective.. It was suggested that a firewall is a 'goofy app wasting RAM'... Advice in many threads is that android anti virus doesnt seem much point if you stay away from dodgy paid app for free apk .. an uneducated guess would be that an anti virus would be more resource hungry than a firewall.. (and think of your battery)
The app that you couldnt think of maybe the 'framework' app called 'xprivacy''
Antivirus apps aren't constantly running. They only scan when you install an apk or when you set it to do so otherwise. It is not a resource hog.
Sent from my SAMSUNG-SM-N900A using Tapatalk 5
Wow im such a noob, I had no idea apps call home! firewall it is ! So that's how I randomly get people calling and leaving ridiculous voice mails, Thanks!

Categories

Resources