Thursday, June 3, 2010

Root Kit for Android

http://www.computerworld.com/s/article/9177576/Android_rootkit_is_just_a_phone_call_away?taxonomyId=15&pageNumber=1

This root kit was created by a security consultant working for Chicago's Trustwave. The demo root kit is for a demo in the up coming Defcon hacking conference in LA.  Basically once the root kit is installed it can be activated with a message or phone call.  It can reroute 911 calls or reroute web addresses.  This is only a prof of concept.  The risk currently is low for this type of attack.  One of the things that help reduce the risk is getting apps through the store.  This way if there is a problem, Android can contact those who download the malices app.

It would seem like you want to make darn sure that your browser doesn't have holes in it what would let someone install a root kit from the Internet.

What might be the avenue of attack?  Web, messages, USB, and Bluetooth.  Are there any others?


No comments:

Post a Comment