<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style id=owaParaStyle>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PostalCode"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="Street"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="address"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="State"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="City"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
p
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=blue ocsi=0 fpstyle=1>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Thank god Angry Birds isn't on the list
<grin><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
cialug-bounces@cialug.org [mailto:cialug-bounces@cialug.org] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Josh More<br>
<b><span style='font-weight:bold'>Sent:</span></b> Wednesday, March 02, 2011
7:57 PM<br>
<b><span style='font-weight:bold'>To:</span></b> cialug@cialug.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> [Cialug] Android market
compromise</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<div>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=2 color=black
face=Verdana><span style='font-size:10.0pt;font-family:Verdana;color:black'>I've
been following the android market compromise yesterday and today and finally
found a reasonably complete list of the infected apps. If you installed
or updated any of the apps below in the last five days, your phone might be
infected. I have removed Chinese names from this list to limit the spam
trap issue. If you're installing non-English apps, check out the
links. The top link has the fix. You can also fix this by upgrading
to Android 2.3 (which may require you to root your phone and install a third
party build like Cyanogen).<br>
<br>
<br>
___Links___<br>
http://forum.xda-developers.com/showthread.php?t=977154 <---
Protection is here<br>
<br>
http://www.androidpolice.com/2011/03/01/the-mother-of-all-android-malware-has-arrived-stolen-apps-released-to-the-market-that-root-your-phone-steal-your-data-and-open-backdoor/<br>
<br>
http://www.androidpolice.com/2011/03/02/update-on-the-malware-monster-droiddream-is-an-android-nightmare-and-weve-got-more-details/<br>
<br>
http://blog.mylookout.com/2011/03/security-alert-malware-found-in-official-android-market-droiddream/<br>
<br>
<br>
<br>
___List___<br>
Advanced App to SD<br>
Advanced Barcode Scanner<br>
Advanced Compass Leveler<br>
Advanced Currency Converter<br>
Advanced File Manager<br>
Advanced Sound Manager<br>
App Uninstaller<br>
Basketball Shot Now<br>
Best password safe<br>
Bowling Time<br>
Bubble Shoot<br>
Chess<br>
Color Blindness Test<br>
Dice Roller<br>
Falldown<br>
Falling Ball Dodge<br>
Falling Down<br>
Finger Race<br>
Funny Face<br>
Funny Paint<br>
Hilton Sex Sound<br>
Hot Sexy Videos<br>
Magic Hypnotic Spiral<br>
Magic Strobe Light<br>
Mr. Runner<br>
Music Box<br>
Omok Five in a Row<br>
Panzer Panic<br>
PewPew<br>
Photo Editor<br>
Piano<br>
Quick Delete Contacts<br>
Quick Notes<br>
Scientific Calculator<br>
Screaming Sexy Japanese Girls<br>
Sexy Girls: Japanese<br>
Sexy Legs<br>
Spider Man<br>
Super Guitar Solo<br>
Super History Eraser<br>
Super Ringtone Maker<br>
Super Sex Positions<br>
Super Sexy Ringtones<br>
Super Stopwatch & Timer<br>
Supre Bluetooth Transfer<br>
Task Killer Pro<br>
Tie a Tie<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 color=black face=Verdana><span
style='font-size:10.0pt;font-family:Verdana;color:black'><o:p> </o:p></span></font></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class=MsoNormal><b><font size=3 color=black face=Verdana><span
style='font-size:12.0pt;font-family:Verdana;color:black;font-weight:bold'>Josh
More</span></font></b><font size=2 color=black face=Verdana><span
style='font-size:10.0pt;font-family:Verdana;color:black'> | Senior Security
Consultant - CISSP, GIAC-GSLC Gold, GIAC-GCIH<br>
<b><span style='font-weight:bold'>Alliance Technologies</span></b> | <a
href="http://www.AllianceTechnologies.net"><font color=red><span
style='color:red'>www.AllianceTechnologies.net</span></font></a><br>
<st1:Street w:st="on"><st1:address w:st="on">400 Locust St., Suite 840</st1:address></st1:Street>
| <st1:place w:st="on"><st1:City w:st="on">Des Moines</st1:City>, <st1:State
w:st="on">IA</st1:State> <st1:PostalCode w:st="on">50309</st1:PostalCode></st1:place><br>
515.245.7701 | 888.387.5670 x7701<br>
<br>
Blog: Don't just blame the bad guys, it's your fault too<br>
<a href="http://www.alliancetechnologies.net/blogs/morej"><font color=red><span
style='color:red'>http://www.alliancetechnologies.net/blogs/morej</span></font></a><br>
<br>
How are we doing? Let us know here:<br>
<a
href="http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey">http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey</a><o:p></o:p></span></font></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>