Security firm Lookout dissects the Geinimi trojan
A week or so ago we warned everyone about the Geinimi trojan that’s been spotted in the wilds of the Orient. The threat level itself hasn’t increased (as far as we know) if you aren’t poking around Chinese Android fansites and downloading slightly questionable programs, so there’s no need to ring the alarm and circle the wagons just yet. Lookout has torn down the trojan itself and gives a great overview of what it does, and how it does it. This isn’t a primer to teach yourself trojan writing, it’s standard practice among security firms to show how things are done and help find ways to prevent it in the future. First, here’s exactly what this trojan can do:
- Read and collect SMS messages
- Send and delete selected SMS messages
- Pull all contact information and send it to a remote server (number, name, the time they were last contacted)
- Place a phone call
- Silently download files
- Launch a web browser with a specific URL
Yikes. Remember, this is so far a pretty isolated incident, and this isn’t in any apps you can get from the Android Market. In fact, so far it looks like it’s confined to "warez" files, so it mirrors what you find on the internet when downloading questionable files for your computer. Our advice — stick to applications from someone you trust, and if you have a need to download random applications (we have to do it here all the time to check them out) find a method to scan them for malicious code.
Lookout breaks the code itself down, if your a developer or just curious be sure to have a look. It’s pretty sophisticated and a shame that the developer(s) don’t put their effort into something a bit more productive. Check the source link for all the details, including a .pdf file with a complete code breakdown. [Lookout] Thanks Cerena!
Security firm Lookout dissects the Geinimi trojan posted originally by Android Central
Sponsored by Android Cases and Accessories
Security firm Lookout warns against ‘Geinimi’ trojan hitting Android in China
Mobile security firm Lookout today sounded the alarm on a new Trojan that apparently is affecting Android devices in China. It’s called "Geinimi" and is piggybacking known legitimate apps, including Monkey Jump 2, Sex Positions, President vs. Aliens, City Defense and Baseball Superstars 2010.
What havoc can it wreak? Says Lookout:
The specific information it collects includes location coordinates and unique identifiers for the device (IMEI) and SIM card (IMSI). At five-minute intervals, Geinimi attempts to connect to a remote server using one of ten embedded domain names. A subset of the domain names includes www.widifu.com, www.udaore.com, www.frijd.com, www.islpast.com and www.piajesj.com. If it connects, Geinimi transmits collected device information to the remote server.
You’re probably going to have to go way, way out of your way for this to be a problem, though. REPEAT: We’re not overly worried about this. You have to download and sideload an infected app through Chinese app stores. So unless you’re doing that, you should be cool.
That said, Lookout notes that Geinimi "did substantially increase the level of effort required to analyze the malware" and that it’s updated its app to protect against the threat. So if you’re running it, you’re cool. [Lookout]
Security firm Lookout warns against 'Geinimi' trojan hitting Android in China posted originally by Android Central
Sponsored by Android Cases and Accessories
Lookout premium now available, we have 10 copies to give away [contest]
Lookout, the popular cross-platform mobile security solution, has announced the availability of Lookout Premium — the advanced version with extra features like the privacy advisor, remote lock and wipe, and enhanced backup and restore. We took a look at it a few weeks back — check it out here. The app provides quite a bit for $2.99 a month ($29.99 annually), and the free 30 day trial lets you have a look and try the extras out for yourself. To try it, just install the free version from the Market (links after the break) and update from within the application.
To make things even better, the folks at Lookout have offered up ten one-year subscriptions for us to give away to readers. Head into the forums for the terms and enter for your chance to win! Head past the break to read the full press release and get the download link for Lookout.
Lookout premium now available, we have 10 copies to give away [contest] posted originally by Android Central
Sponsored by Android Cases and Accessories
Lookout to offer premium version with remote lock, wipe
Lookout, one of the premiere smartphone security suites, has released Lookout Premium — offering Privacy Advisor, remote lock, and remote wipe on top of their award winning free services. Current customers need do nothing to keep the service they have now, and the free version of Lookout will remain available for those who choose to use it over the premium package. The premium service costs $2.99 USD per month, or $29.99 annually, and a 30-day trial is available.
We spoke with John Hering, CEO of Lookout and got the information everyone is wanting to hear, as well as some time with the new premium service. We’ve got the run down, the official press release, download links, and all you need to make a decision after the break. Thanks Max, Erika, and John from Lookout for taking the time to answer our questions!
Posted originally at Android Central
Sponsored by Android Cases and Accessories
Lookout Mobile Security planning to add a premium service
Lookout Mobile Security is one of the most popular security apps available on Android — you can read our full review of it here.
An announcement from Lookout to its users today confirms that it will be introducing a premium service in the near future, making some of the free features available for a price.
While Lookout hasn’t said what the premium service will include, it did provide these details:
- A free version of Lookout will continue to be available
- Existing users of Lookout will continue to get all the features they enjoy right now for free, for the life of the account
- The premium version will be specifically to Android at the beginning, with other platforms to follow
A pretty good deal if you ask us. Lookout offers some great features and the fact that existing users can enjoy the product free of charge after the premium version comes out only emphasizes the need for customers to try this out. If you haven’t tried Lookout yet, find the link and the QR code to follow. For a full look at the announcement, check after the break. [Lookout]
Posted originally at Android Central
Sponsored by Android Cases and Accessories
Lookout — a full security solution for your Android phone
Here at Android Central, we don’t just report the Android news and review the new gear. We actually use Android phones, so we’re always searching for apps and tools that make our own phones work better for us. Lately, it seems like security issues (or overblown non-issues) are crawling out of the woodwork, so the search was on for a solution that takes care of any concerns, without getting in the way.
After all was said and done, Lookout seemed to rise to the top. Not only does Lookout address any concerns you may have with malware, it turns out that it’s an excellent backup and tracking solution. Follow after the break, while I take a good look at Lookout and even put it through the paces a bit.
Posted originally at Android Central
Sponsored by Android Cases and Accessories
Security firm details privacy concerns; developer tells us its side of the story
Let’s recap: Late Wednesday night (or early Thursday morning), we reported on a story published at Mobile Beat that came out of the Black Hat online security conference. At the conference, Kevin MaHaffey, CTO at mobile security firm Lookout, told of an app from developer "jackeey,wallpaper," which basically is a portal for downloading wallpapers for your Android phone. The story told the tale of "a questionable Android mobile wallpaper app that collects your personal data and sends it to a mysterious site in China, (and) has been downloaded millions of times."
We’ve been in contact with Lookout — which reiterates that the apps, while suspect, aren’t necessarily malicious. We’ve also have a response from the developer in question. Updates from both, after the break.
Posted originally at Android Central
Sponsored by Android Cases and Accessories
Another rogue app stealing data, security firm reports
Before we start, grab your phone and your computer and hit this link : Android apps by jakeey, wallpaper. If you have any of these applications on your Android phone, uninstall them.
We’ll wait.
Now you ask why did we recommend (nay, demand!) you uninstall any of those apps? Lookout says that one or more of these apps are stealing your data and sending it to an unknown person or persons in China. Yup, innocent looking wallpaper apps. According to Lookout, the app(s) in question are collecting:
- browsing history
- text messages
- your SIM card data
- subscriber ID
- voicemail password
Look for Google to pull these soon, as they potentially affect at least 1.1 million users, but for now remember to read what an app can do when you install it. That’s that screen you ignore every time you install an app. The one that tells you what system permissions the app has access to. If, say, a calculator wants to see your contacts list, think twice.
It’s worth reminding that Android is the only OS that gives you these sort of warnings. And before any Apple fanatics get too cocky, at least these apps aren’t stealing money from your Google checkout account. We’re keeping a close eye on this one, you’ll hear more as it unfolds. [Mobile Beat via 9 to 5 Mac]
Posted originally at Android Central
Sponsored by Android Cases and Accessories