

Malware stops its fraud after one run to avoid raising suspicion











Thanks, Jon for the email about your analysis!

Comments     Threshold


Humans are the weakest link
By JimmiG on 8/12/2010 6:59:56 AM , Rating: 5
So, to install this trojan you have to:

1. Go into Settings/Application settings and enable "Unknown sources"
1 b) Many carriers disable this option, which would mean you have to root your phone first - a complex, multi-step process on its own

2. Accept the warning that this poses a security risk

3. Open the message

4. Select the link

5. Accept another warning telling you that you're giving this application full control of SMS text messages and more

6. Run the application.

They could put in another 10 steps and warnings, and some people would still just bulldoze their way past them without reading. It's impossible to write software that is secure as long as it's operated by humans.

RE: Humans are the weakest link
By Cheesew1z69 on 8/12/2010 12:19:37 PM , Rating: 2
Root the phone? Who disables that option? I didn't need to root, it was on my phone, not enabled but it's there and I can use it anytime.

I am using a Samsung Moment.

RE: Humans are the weakest link
By erple2 on 8/12/2010 1:44:15 PM , Rating: 2

No, that's easy to do. It is, however, impossible to write secure software that a willful (intentional or not) user can change with a "Yes/No" dialog box.

RE: Humans are the weakest link
By JimmiG on 8/12/2010 3:29:06 PM , Rating: 2
Yeah, you could create a completely locked down system so instead of "Are you sure?" prompts, you simply remove all dangerous options and settings from view. But the definition of "dangerous" can be pretty broad. Should users even be allowed to modify files they've created? If you give an image editor the power to change user images, you also give it the power to remove or destroy them, for example.

Locking the system down is kind of what Apple are doing with iOS, which is great for some people but a real annoyance to others. At least the complex (in most cases) jailbreaking procedure helps protect dumb users from themselves.

Some (not all) carriers disable the option to install from unknown sources, so if you got your Android phone from a carrier on a contract, the option may not be there.

