Sign In
Register
Help
Quote
German Server Found to Serve Malicious Mobile Apps
Researchers came across a server located in Germany that hosts numerous websites ready to serve mobile malware that targets Android and Symbian users.
Trend Micro experts found a total of 1,351 sites hosted on the server in question, all the websites falling into a certain category. They identified Android Market apps, Opera Mini and Phone Optimizer apps, adult apps, app storage sites, and others. The ones that host adult content are currently unavailable, probably because they’re still being set up, or they were simply taken down by the cybercriminals.
The Android Market app websites are designed to look very similar to the legitimate one, featuring popular applications such as Facebook, Skype, Google Maps, Gmail and YouTube.
The files downloaded from this category contain a malicious element identified by Trend Micro as ANDROIDOS_FAKENOTIFY.A. The files from the Opera Mini and Phone Optimizer category contain a piece of malware called J2ME_SMSSEND.E, especially designed for devices supporting MIDlets.
Statistically speaking, besides the Others category, most sites offer so-called Opera Mini updates and Photo Optimizer applications, followed by Android Market apps with close to 300 websites. “This particular cybercriminal operation presents some interesting findings. Here we saw that the attackers are not necessarily targeting only one platform,” Paul Pajaresm, Trend Micro Fraud analyst, said.
Researchers came across a server located in Germany that hosts numerous websites ready to serve mobile malware that targets Android and Symbian users.
Trend Micro experts found a total of 1,351 sites hosted on the server in question, all the websites falling into a certain category. They identified Android Market apps, Opera Mini and Phone Optimizer apps, adult apps, app storage sites, and others. The ones that host adult content are currently unavailable, probably because they’re still being set up, or they were simply taken down by the cybercriminals.
The Android Market app websites are designed to look very similar to the legitimate one, featuring popular applications such as Facebook, Skype, Google Maps, Gmail and YouTube.
The files downloaded from this category contain a malicious element identified by Trend Micro as ANDROIDOS_FAKENOTIFY.A. The files from the Opera Mini and Phone Optimizer category contain a piece of malware called J2ME_SMSSEND.E, especially designed for devices supporting MIDlets.
Statistically speaking, besides the Others category, most sites offer so-called Opera Mini updates and Photo Optimizer applications, followed by Android Market apps with close to 300 websites. “This particular cybercriminal operation presents some interesting findings. Here we saw that the attackers are not necessarily targeting only one platform,” Paul Pajaresm, Trend Micro Fraud analyst, said.
Story here: http://news.softpedi...ps-251201.shtml
MultiQuote