full-disclosure - Study of BlackBerry Proof-of-Concept Malicious Applications (Whitepaper)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1492696945.288851263831978497.JavaMail.root@gallifrey.ece.ohio-state.edu>
Date: Mon, 18 Jan 2010 11:26:18 -0500 (EST)
From: Mayank Aggarwal <aggarwam@....osu.edu>
To: bugtraq@...urityfocus.com
Subject: Study of BlackBerry Proof-of-Concept Malicious
 Applications (Whitepaper)

Hello All,

SMobile’s Global Threat Center (GTC) has released a research study on proof of concept malicious applications for BlackBerry platform. This research exposes the weakened security posture of BlackBerry device that operate under the BlackBerry Internet Service environment. The proof of concept applications discussed in this research are developed to examine the response of BlackBerry inbuilt security framework. Through this research, SMobile concludes that there are certain instances of attacks that may be successful in bypassing the security framework of BlackBerry and poses a significant threat to privacy and confidentiality of the user. This research paper can be downloaded here:

http://threatcenter.smobilesystems.com/?p=1752

-Mayank

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/