New Trojan Spreading On App Store and Google Play

A new Trojan that uploads users’ phonebooks to a remote server is making the rounds, circulating on both Apple’s App Store and the Google Play marketplaces, according to research by Kaspersky Lab posted on the Securelist web site earlier today. Kaspersky virus researchers, responding to a request...

Security Veterans Score Funding for New Startup Bluebox

Many people would consider themselves lucky to be a part of one successful start-up company, but for a select group of entrepreneurs, engineers and executives, that’s just the beginning. Such is the case for the team behind new mobile security firm Bluebox, a stealth-mode company that counts SPI...

New Fake Android Security App is Zeus Malware

There’s a new series of malicious Android applications masquerading as a premium security app for the mobile platform, and researchers say that the malware is part of the Zeus empire. The fake security apps began showing up in researchers’ malware traps in early June and newer versions have...

Phil Zimmermann Returns With Silent Circle Voice and Data Privacy

If you use encryption products to protect your data or communications, you owe a debt of gratitude to Phil Zimmermann. Now, Zimmermann is aiming to collect on that debt with his new company, Silent Circle, a startup that will provide secure phone, email and SMS communications. Zimmermann has been...

Foncy is Dead, Long Live Mania

In the middle of January 2012 Foncy was updated: it started to spread together with an IRC bot and a root exploit. But the end of the Foncy story was very close because in February two suspected authors of this malware were arrested in Paris: you can read the story here in French and here in...

Tatanga Trojan Mixes MitB with Social Engineering

Cybercriminals are using the Tatanga trojan to carry out a complicated man-in-the-browser MitB attack that enables the circumvention of SMS authentication for financial transactions, according to Trusteer’s Amit Klein. The attack is targeting the customers of a number of banks in Germany. How man...

CVE-2012-2562

The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a 1 LOCATE, 2 TRACK, 3 UPDATECFG, 4 UPDATEACCT, 5 STAT, 6 TERM, or 7 WIPE command via an SMS message...

Command injection

The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a 1 LOCATE, 2 TRACK, 3 UPDATECFG, 4 UPDATEACCT, 5 STAT, 6 TERM, or 7 WIPE command via an SMS message...

CVE-2012-2562

The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a 1 LOCATE, 2 TRACK, 3 UPDATECFG, 4 UPDATEACCT, 5 STAT, 6 TERM, or 7 WIPE command via an SMS message...

CVE-2012-2562

The CVE-2012-2562 entry concerns Xelex MobileTrack for Android (≤ 2.3.7). The issue is lack of verification of SMS command origin, allowing an unauthenticated remote attacker to issue commands (LOCATE, TRACK, UPDATECFG, UPDATEACCT, STAT, TERM, WIPE) via SMS. Consequences cited include possible un...

PT-2012-4103

Name of the Vulnerable Software and Affected Versions Xelex MobileTrack versions 2.3.7 and earlier Description The issue allows remote attackers to execute various commands via an SMS message because the application does not verify the origin of SMS commands. This can lead to the execution of...

CVE-2012-2562: Improper Input Validation

The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a 1 LOCATE, 2 TRACK, 3 UPDATECFG, 4 UPDATEACCT, 5 STAT, 6 TERM, or 7 WIPE command via an SMS message...

Xelex Technologies MobileTrack contains multiple vulnerabilities

Overview Xelex Technologies' MobileTrack application has been reported to not verify the source of administrative SMS commands. An unauthenticated remote attacker can send commands over SMS to MobileTrack. User data is also exposed on an insecure FTP server account. Description The website for...

MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities

Exploit for hardware platform in category web applications Title: ====== MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities Common Vulnerability Scoring System: ==================================== 7.3 Introduction: ============= Mobile Spy defines the latest in high-tech cell phone...

Spammers Targeting Pinterest Using Point-And-Click Tools

Spammers have jumped on the latest social media craze: the photo sharing site Pinterest. And they’re being helped out by new, automated spam toolkits designed to exploit the fast growing new social network. As Threatpost has reported, spammers have figured out ways to use Pinterest to drive traff...

Fraudulent Apps and Fake AV Found on Google Play

Researchers from the security firm AegisLab discovered more than 15 fake antivirus and free SMS applications on Google’s recently rebranded content market place, Google Play. The applications are redirecting users to a third party site run by the app’s developer. AegisLab researchers could not sa...

CVE-2012-2217

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote...

Code injection

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote...

CVE-2012-2217

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote...

CVE-2012-2217

The CVE-2012-2217 entry concerns the HTC IQRD service on multiple HTC Android devices (e.g., EVO 4G, EVO Design 4G, Shift 4G, EVO 3D, EVO View 4G, Vivid, Hero) where localhost access to TCP port 2479 is not restricted. This allows remote attackers to perform actions via a crafted app with android...