So, how does one write mobile spyware?
Wednesday December 13, 2006 at 2:48 pm CST
Posted by Jimmy Shah
Some helpful soul has decided there isn’t enough Symbian spyware in the world. A Russian malware author has released a prototype of SMS forwarding spyware, SymbOS/Htool-SMSSender.A.intd. He’s included the source code to aid in modification.
The author, let’s call him Scripty, says that SymbOS/Htool-SMSSender.A.intd can:
- Hide from the user
- Load on startup
- Copy the text of the last SMS you received
- Send that text in a new SMS to the author
SymbOS/Htool-SMSSender.A.intd performs the first three steps well, but it fails to do the last. Looking at the source code, it appears Scripty didn’t write the SMS sending code. Scripty, though apparently unskilled, believes the source code will be useful to other malware authors for constructing their own SMS spyware.
Only last week we saw signs of malware authors integrating commercial spyware into their creations. This week we’ve run across the first evidence that malware writers are actively working on developing their own spyware.
December 13th, 2006 at 7:39 pm
As always, while the source code has been spread around, the number of variant will start to increase as other malware creators just do some modification on it.
Yes, indeed a smartphone is a very powerful “mini-computer” and more into functionality too. It can’t be denied that such useful smartphone become popular, especially in business sector. Some businessman use smartphone to check their mail, store personal details like bank account number and password into mobile wallet, use SMS service to have an online banking etc.
In this case, more and more private and confidential data will keep exchanging in mobile network and this will get Hacker attention on it. Some of them “extract” your data for fun purpose but for some of them is the real stealer which means that they create spyware application just for profit only.
I still have to emphasize on “prevention is better than cure”. User should practice some security measures in order to prevent themselves from being infected by malicious program.
Here are some tips from me which you can refer in order to lower down the risk of infected by malicious program:
1. Don’t install any suspicious application via MMS or Bluetooth, usually file arrive through BT and MMS should be a malicious program especially you’re in a crowded place like Cinema, Stadium etc.
2. Avoid of installing warez/suspicious/shareware application and this will increase the possibility of being infected by mobile malwares.
3. Install an anti-virus in your phone. Preferably, I will choose a reputable AV vendor to ensure I get maximum protection
4. Perform a full system scan on your phone at least once a week if you always install suspicious application to your phone.
5. Not to forget to update latest virus signature/definition regularly to ensure you’re protected from latest threat.
6. Check you itemized billing for any suspicious connection that you’ve not make. You can also check your communication activity in your “Log” application.
That’s all the tips for now. Hope those tips will help some of you.