160By2 / Way2SMS Cross Site Request Forgery

Cross Site Request Forgery CSRF Vulnerability in Top Online-based SMS sending service websites 160By2.com and Way2SMS.com. The Security flaw in 160By2 allows hackers to send sms from victim account. This Security flaw in Way2Sms hacker to change the name, dob and other details of the victim with ...

Android Trojan Apps Build SMS Botnet

A rudimentary, SMS-based botnet is ensnaring Android users into its web with a series of text messages offering free downloads for popular, paid gaming applications, according to Cloudmark researcher Andrew Conway. The Trojan applications are reportedly mimicking games such as The Need for Speed...

Apple Addresses New SMS Trojan in Malware Lists

Apple has made updates to its malware definitions to address yesterday’s news of a new OS X Trojan, SMSSend.3666, that was disguising itself as legitimate software and confounding Russian users. The Trojan, first blogged about by antivirus firm Dr. Web, tricked users into entering their cell phon...

SMS Extortion Trojan Targeting Apple Machines

In yet another blow to the tenuous false sense of security among Apple users, the Russian antivirus firm Dr. Web has uncovered what it claims is a first-of-its-kind fake installer Trojan targeting Mac machines and extorting their users with SMS fraud. Trojan.SMSSend.3666 is the Mac variant within...

Twitter Downplays SMS-Spoofing Issue

Twitter officials say that a researcher’s claims that the service is open to an SMS-spoofing vulnerability are not completely accurate, and that Twitter users in the United States are not vulnerable to the attack. Moxie Marlinspike of Twitter’s security team said that the company in August had...

Twitter Resolves SMS Bug (For Some Users)

UPDATE–A day after an independant security researcher disclosed a vulnerability in SMS-enabled Twitter accounts, the social network giant announced it’s fixed the flaw – at least for some users. Those who use a “long code” and/or cannot use a PIN code remain at risk. The update came Tuesday eveni...

Twitter SMS-Spoofing Bug Allows Attackers to Send Tweets From Users' Accounts, Edit Profiles

There is a bug in the way that Twitter handles a feature that enables users to post messages via SMS and the researcher who discovered the bug says that it allows anyone who knows a user’s mobile number to not only tweet from the user’s account but also modify information in the user’s profile. T...

The number of silver online the Struts command execution vulnerability, the total station the fall-vulnerability warning-the black bar safety net

Vulnerability Title: The number of silver online the Struts command execution vulnerability, the whole Station fall Vulnerability type: command execution Harm level: high Brief description: The number of silver online some address the presence of the Struts command execution vulnerability...

Site Found Delivering Angry Birds Star Wars With Costly SMS Sender Functionality

Fake and malicious Android apps have become an industry unto themselves in the last couple of years, as attackers have sought to capitalize on the massive market share that the mobile OS enjoys worldwide. It’s a safe bet that any popular new app will attract a malicious copycat version, and...

Google Adds Malware Scanner to Jelly Bean 4.2

Google has been taking some steps to address the problem of malware on the Android platform in recent months, introducing the Bouncer antimalware system and some better anti-exploit technologies in Jelly Bean, the most recent version of the operating system. Now, the company is implementing some...

Russian Underground Cybercrime market offering sophisticated services

Security firm Trend Micro recent analyses the Russian crimeware markets and has found that malware tools and services range from one-time packages which cost just pennies to sophisticated packages and services which cost purchasers thousands of dollars per month. If you want to buy a botnet it wi...

Android, Symbian Malware on the Rise

Yes. You read that headline correctly. F-Secure is talking about the beleaguered and nearly defunct Symbian operating system, upon which Nokia halted nearly all development in February before announcing that it had been put in maintenance mode in September. Despite a nearly 63 percent drop in...

Android Smishing Vulnerability Found in Android Open Source Project Firmware

A vulnerability discovered in the Android Open Source Project enables malicious applications to send SMS messages without user permission across all recent Android platforms. While no exploits are active in the wild, one could be built that could be at the center of various SMS phishing, or...

Android Smishing Vulnerability, an intelligent exploitation by Malicious Apps

Your android device allows you to connect with anyone at anytime, if they are available. Mobile-enhanced shopping and banking sites gives you freedom to buy anything - anywhere. You have millions of applications, that you can install to pimp up your device. But same applications can exploit your...

Android 4.2 Jelly Bean Security Improvements overview

Google is bringing a host of new features to its Android 4.2 Jelly Bean operating system designed to increase productivity, creativity and peace of mind and some very promising security improvements including: client side malware protection, Security Enhanced Linux, and always-on VPN. Most...

CVE-2012-3744

Telephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender address, which allows remote attackers to spoof text communication via a message in which the return address does not match the originating address...

CVE-2012-3745

Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service buffer overflow and connectivity outage via a crafted user-data header in an SMS message...

Design/Logic Flaw

Telephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender address, which allows remote attackers to spoof text communication via a message in which the return address does not match the originating address...

Buffer overflow

Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service buffer overflow and connectivity outage via a crafted user-data header in an SMS message...

CVE-2012-3744

Telephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender address, which allows remote attackers to spoof text communication via a message in which the return address does not match the originating address...