full-disclosure - Re: Android and malware

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <20101124161604.F2575FEBF@smtp.hushmail.com>
Date: Wed, 24 Nov 2010 11:16:04 -0500
From: "Elazar Broad" <elazar@...hmail.com>
To: full-disclosure@...ts.grok.org.uk, eyeballing.weev@...il.com
Subject: Re: Android and malware

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It is definitely possible(http://www.cultofmac.com/android-app-
sends-personal-data-to-china/52929), there have been several well
know local root exploits(i.e. http://c-
skills.blogspot.com/2010/08/please-hold-line.html) for the Android
system, though it may be a busted proximity sensor. Just my .02...

On Tue, 23 Nov 2010 22:46:05 -0500 Eyeballing Weev
<eyeballing.weev@...il.com> wrote:
>Hello
>
>My friend is a public official and he believes his Android (HTC
>Dash)
>was bugged/infected by someone through a text message attachment.
>Has
>anyone seen anything commercially available or available online to
>do this?
>
>I don't know anything about smartphones but was wondering if
>anyone has
>Android experience with something like this. Does the Android have
>
>startup functions like Windows's Startup folder where we can
>investigate?
>
>The issues are a real bad echo, the phone acting really weird such
>as
>the battery life going bad and the phone lighting up on the table
>during
>it being idle.
>
>Thank you
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>Hosted and sponsored by Secunia - http://secunia.com/
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 3.0

wpwEAQECAAYFAkztOkQACgkQi04xwClgpZj7oAP9G2jMTkId1KjJyZZvsALO/U7tWyLt
/WzmYzwW4kniD9eErfrHgsX3pF+vje+Cvwg9gjPoFQAMitkRcZ2Qbgwvi6ikrS5/52uF
c/CTgr4lTMN86laGeSP5Fj3dZsuUNJYdKE/KCGwLYhZbT6HfCLqW6vwHtk4mF96h7XM1
H78vhI4=
=ZGNx
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/