Mac OS X Ransomware 'A Matter of Time'

In need of a fresh example that cybercriminals are actively looking for ways to monetize infected Mac OS X hosts? Early-stage discussions at several web forums, including a PoC proof of concept, source code included Mac OS X blocker as well as potential GUIs for the ransomware, offer an insight...

[MTK]cottage phone SMS attack-vulnerability warning-the black bar safety net

Article author:chovil Impact of mobile phone brands: all MTK solution mobile phone, that is, we often say that the cottage phone And write text messages with the “options” - the“Insert object” - the“My ringtones” this one features most of the cottage phone has this feature The vulnerability...

iPhone Worm Was Simple, Yet Effective, Analysis Shows

The iKee worm that was infecting jailbroken iPhones last month was a simple, yet effective, piece of software that shows how easy it might be for an attacker to create a fairly large, functioning botnet comprising mobile devices, an analysis of the worm shows. Researchers at SRI International’s...

New Ransomware Blocks Internet Access

Security researchers have stumbled upon a new piece of ransomware that blocks an infected computer from accessing the Internet until a fee is paid via SMS text message. The latest ransomware file is bundled with a program called uFast Download Manager. Once a machine is infected, a message is...

Microsoft SMS Remote Control Service Denial of Service (CVE-2004-0728)

Microsoft's Systems Management Server SMS is a change and configuration management server for the Microsoft Windows platforms. One component of this system is a client utility that allows an administrator to obtain control over remote client computer. This remote assistance service is installed a...

Now SMS/MMS Gateway Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Now SMS/MMS...

Product or Malware? Android Spying App Released

A well known commercial provider of spyware applications for numerous mobile platforms, has recently ported its Mobile Spy app to the Android mobile OS. Just like previous releases of the application, the Android version keeps a detailed log of GPS locations, calls, visited URLs, and...

Design/Logic Flaw

The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service application restart and network disconnection via an SMS message containing a malformed WAP Push message that triggers an ArrayIndexOutOfBoundsException exception, possibly a related issue to...

CVE-2009-2999

The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service application restart and network disconnection via an SMS message containing a malformed WAP Push message that triggers an ArrayIndexOutOfBoundsException exception, possibly a related issue to...

CVE-2009-2999: Undefined Security Weakness

The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service application restart and network disconnection via an SMS message containing a malformed WAP Push message that triggers an ArrayIndexOutOfBoundsException exception, possibly a related issue to...

Google Android multiple security vulnerabilities

DoS via SMS, DoS via Dalvik API...

[oCERT-2009-014] Android denial-of-service issues

2009-014 Android denial-of-service issues Description: Android, an open source mobile phone platform, is affected by two bugs that lead to denial-of-service DoS conditions. Two separate DoS issues have been independently reported to oCERT. The most recent report concerns Android handling of SMS...

iPhone SMS Used as Bait in Rogue AV Scam

Cyber-criminals are using interest in MMS or SMS on the iPhone to trick users into downloading rogue antivirus software. According to security company Websense, attackers are abusing Google’s search engine to get users to click on links leading to a malicious page pushing scareware. Read the full...

MMS Notification Obfuscation

Security Advisory: Multiple Smartphones MMS Notification Sender Obfuscation --------------------------------------------------------------------------- Discovered by: Michael Mueller a.k.a. c0rnholio Contact: c0rnholio on domain netcologne.de Advisory Homepage:...

Apple iPhone 3.1之前版本SMS消息NULL指针引用漏洞

Bugraq ID: 36336 CVE ID：CVE-2009-2815 iPhone是一款苹果公司发布的智能手机。 iPhone处理到知通告的SMS消息存在NULL指针应用错误，发送特殊构建的SMS消息可导致服务中断，造成拒绝服务攻击。 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple...

CVE-2009-2815

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service NULL pointer dereference and service interruption via a crafted SMS message...

Null pointer dereference

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service NULL pointer dereference and service interruption via a crafted SMS message...

CVE-2009-2815

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service NULL pointer dereference and service interruption via a crafted SMS message...

CVE-2009-2815: Undefined Security Weakness

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service NULL pointer dereference and service interruption via a crafted SMS message...

Apple iPhone短信消息远程内存破坏漏洞

BUGTRAQ ID: 35569 CVECAN ID: CVE-2009-2204,CVE-2009-2315 Apple iPhone是苹果最新发布的智能手机。 iPhone手机在解码短信消息时存在内存破坏漏洞，远程攻击者可以通过发送恶意短信导致执行任何代码、获取GPS坐标或启用话筒。 Apple iPhone 3.0 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...