• Login:

Welcome to the Toshiba Thrive Forum.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed.

+ Reply to Thread
Results 1 to 5 of 5
  1. #1
    Developer

    Member #
    18359
    Join Date
    Sep 2012
    Location
    Surprise, Az (that's a real place)
    Posts
    3,751
    Liked
    1889 times
    Twitter
    piomasaki

    New Android Trojan

    Very interesting read. A masterpiece, really, for what it is. To bad its used this way.

    http://www.securelist.com/en/blog/81...Android_Trojan

    Tapatalked from my HTC DNA - Carbon
    JB/ICS OC Kernels | My ROMs section | TWRP Recovery for Thrive
    CM10 General Thread | Jelly Bean Guide
    Donations, always appreciated!
    Need a rollback or reflash? Just send a PM!

  2. Ads


  3. #2
    Super Moderator
    Member #
    20118
    Join Date
    Nov 2012
    Posts
    1,233
    Liked
    377 times
    Wow, "pernicious" doesn't begin to describe that! I was most amazed at its ability to prevent itself from being deleted, meaning the only way to remove it is a full wipe, right?

    I wonder where this came from, what it was bundled with or masqueraded as. I download only from Google and Amazon, and even then I scrutinize what apps want. There was a radio app I opted not to install because it seemed to want too many permissions.
    Frequent pilferer of wife's Thrive 10, currently sporting Pio's Kuroikaze Shinka B25.
    Nexus 7 owner and eternal Commodore enthusiast.

  4. #3
    Thrive Pursuant
    Member #
    12803
    Join Date
    Mar 2012
    Location
    Spring, Texas
    Posts
    609
    Liked
    108 times
    Twitter
    SteveJax

    Lightbulb

    Reading the comments it was made clear that it was originally sent to devices via SMS Spam! Since most Thrives & Excites are not phones, doubtful they'd get SMS messages and if they do, hopefully the user is smart enough to not click on SMS spam messages to begin with!
    Tablet: Toshiba Thrive AT100 10.1 32gb
    ROM: DaleNet Deodexed ICS ROM
    Firmware: 4.0.4
    Kernel: 2.6.39.4-g2388484 android-toshiba@tesibuild7 #1 SMP PREEMPT Mon Jul 23 11:22:12 IST 2012
    Build Number: IMM76D.01.00072314

  5. #4
    Thrive Tech
    Member #
    4149
    Join Date
    Oct 2011
    Location
    127.0.0.1
    Posts
    1,158
    Liked
    166 times
    Yes, but once something like this is out, they, or the imitator criminals will hook to some other function. It's just a matter of time.

    Just for the sake of discussion, suppose it can get into Thrives or Excites via some software we get.
    Kaspersky says it can't be removed, but I'd think eventually someone will find a way
    ( there's a post on Avast mobile forum where they say they're studying it
    http://forum.avast.com/index.php?topic=126577.0 )

    What's the future?
    Google might patch this and new holes as they come up
    What's in it for us?
    - Unrooted poeple aren't getting any more Toshiba updates
    - Rooted and/or custom ROM people can't be updated by Toshiba anyway
    - So who would remove that plague? AV companies? Our developers?

    What do you all think?
    Last edited by ttmoo; 06-08-2013 at 09:15 PM.
    DaleNet-Thrive_10-IMM76D.01.000072314-Deodexed_Stock_Rooted_ROM-v1.0 + Avast Mobile Security + AdAway
    DaleNet-Thrive_7-HTK55D.31.5.0008-OOM_Rooted_ROM-v1.0 + Avast Mobile Security + AdAway
    Windows XP-Pro-SP3

  6. #5
    Thrive Tech
    Member #
    4149
    Join Date
    Oct 2011
    Location
    127.0.0.1
    Posts
    1,158
    Liked
    166 times
    Mobile Avast now sees it, likely other vendors do too
    avast! blog Android:Obad ? malware gets smarter ? so does AVAST
    but if it's one of those polymorphic jobs, all bets are off.
    DaleNet-Thrive_10-IMM76D.01.000072314-Deodexed_Stock_Rooted_ROM-v1.0 + Avast Mobile Security + AdAway
    DaleNet-Thrive_7-HTK55D.31.5.0008-OOM_Rooted_ROM-v1.0 + Avast Mobile Security + AdAway
    Windows XP-Pro-SP3


 


Ads

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts