Android, Symbian Malware on the Rise

Yes. You read that headline correctly. F-Secure is talking about the beleaguered and nearly defunct Symbian operating system, upon which Nokia halted nearly all development in February before announcing that it had been put in maintenance mode in September. Despite a nearly 63 percent drop in...

Android Smishing Vulnerability Found in Android Open Source Project Firmware

A vulnerability discovered in the Android Open Source Project enables malicious applications to send SMS messages without user permission across all recent Android platforms. While no exploits are active in the wild, one could be built that could be at the center of various SMS phishing, or...

Android Smishing Vulnerability, an intelligent exploitation by Malicious Apps

Your android device allows you to connect with anyone at anytime, if they are available. Mobile-enhanced shopping and banking sites gives you freedom to buy anything - anywhere. You have millions of applications, that you can install to pimp up your device. But same applications can exploit your...

Android 4.2 Jelly Bean Security Improvements overview

Google is bringing a host of new features to its Android 4.2 Jelly Bean operating system designed to increase productivity, creativity and peace of mind and some very promising security improvements including: client side malware protection, Security Enhanced Linux, and always-on VPN. Most...

CVE-2012-3745

Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service buffer overflow and connectivity outage via a crafted user-data header in an SMS message...

CVE-2012-3744

Telephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender address, which allows remote attackers to spoof text communication via a message in which the return address does not match the originating address...

Design/Logic Flaw

Telephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender address, which allows remote attackers to spoof text communication via a message in which the return address does not match the originating address...

Buffer overflow

Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service buffer overflow and connectivity outage via a crafted user-data header in an SMS message...

CVE-2012-3744

Telephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender address, which allows remote attackers to spoof text communication via a message in which the return address does not match the originating address...

CVE-2012-3745

Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service buffer overflow and connectivity outage via a crafted user-data header in an SMS message...

CVE-2012-3744

CVE-2012-3744 is an iOS Telephony vulnerability where an SMS message may spoof the sender by the message’s return address being displayed as the sender. Connected Apple security documentation confirms this CVE and indicates the issue was addressed in iOS 6 via Apple’s update, so the remediation i...

CVE-2012-3745

CVE-2012-3745 affects iOS before 6, in Telephony. Off-by-one error in the handling of SMS user-data headers can allow a remote attacker to trigger a denial of service via a crafted SMS, potentially causing a buffer overflow and connectivity outage. Connected documentation references the same CVE ...

Al Jazeera SMS service Hacked, Fake messages spread by Hackers

Al-Jazeera says hackers have targeted the Qatar-based TV satellite channel for the second time in a week, sending out false news reports on its mobile sms service. Al Jazeera confirm the hack in a tweet,"We'd like to inform our subscribers that Aljazeera sms sevice is being compromised by pirates...

Report: Toll Fraud Emerges as Android's Number One Threat

Mobile malware continues to run rampant, thanks to a growing glut of toll fraud malware – apps that have been engineered to bill its victims through premium SMS services. The malware type eclipsed spyware this year as the largest application-based threat according to mobile security firm Lookout...

iPhone SMS spoofing vulnerability disclosure-vulnerability warning-the black bar safety net

Vulnerability description: 4 days ago Pod2g issued a document to Never trust SMS: iOS text spoofin http://pod2g-ios.blogspot.com/2012/08/never-trust-sms-ios-text-spoofing.html The vulnerability can affect all iOS version including the latest iOS 6 beta 4 to. And cloth use the program:...

Fake Flash Player, Laden with Malware, Making Rounds

Scammers have already begun to take advantage of Adobe’s recent decision to remove its Flash Player from Android’s Google Play marketplace. Last week’s removal has prompted scammers to start promoting fake versions of the software to unsuspecting smartphone owners. While researching the scamware,...

Apple iOS SMS伪造漏洞

Apple iOS是一款苹果公司开发的移动设备上的操作系统。 Apple iOS上的SMS存在安全漏洞，允许攻击者获取敏感信息或进行伪造攻击。 SMS消息的文本负载中，UDH User Data Header段是一个可选的，但定义了很多手机不兼容的高级功能。其中有个选项允许用户更改文本的回复地址，如果目的手机兼容此消息，并且如果接收者尝试回复文本，那么他就不会回应原来的号码，而是指定的那个。大多数运营商不会检查这部分消息，这意味着攻击者可以任意指定此段，如修改为911或其他号码。 要利用这个SMS漏洞，需要攻击者可以RAW PDU格式发送文本。 0 Apple iOS 厂商解决方案...

SMSZombie Malware Infecting Android Devices, Stealing Money

A nasty new piece of malware that has the ability to steal money from users’ via fraudulent SMS payments has shown up in a Chinese Android market and researchers say it’s infected more than 500,000 victims. The SMSZombie malware is being hidden inside apps on the app market and once it’s on a...

Serious Security Flaw : iPhone Bug Allows SMS Spoofing

A rather serious security flaw in the iPhone's SMS messaging system has been discovered and revealed by well-known security researcher and jailbreak extraordinaire 'pod2g'. Security flaw affecting all iPhones that he says could facilitate hackers or thieves to access your personal information. Th...

Researcher Finds iPhone Bug Allows SMS Spoofing

The iPhone SMS app contains a quirky bug that could allow someone to send a user a text message that appears to come from any number that the sender specifies. The researcher who discovered the bug said that it could be used by attackers to spoof messages from a bank or credit card company and se...