[Cialug] Android market compromise

[Matt Breitbach]

Thank god Angry Birds isn't on the list <grin>

 

  _____  

From: cialug-bounces at cialug.org [mailto:cialug-bounces at cialug.org] On Behalf
Of Josh More
Sent: Wednesday, March 02, 2011 7:57 PM
To: cialug at cialug.org
Subject: [Cialug] Android market compromise

 

I've been following the android market compromise yesterday and today and
finally found a reasonably complete list of the infected apps.  If you
installed or updated any of the apps below in the last five days, your phone
might be infected.  I have removed Chinese names from this list to limit the
spam trap issue.  If you're installing non-English apps, check out the
links.  The top link has the fix.  You can also fix this by upgrading to
Android 2.3 (which may require you to root your phone and install a third
party build like Cyanogen).


___Links___
http://forum.xda-developers.com/showthread.php?t=977154  <--- Protection is
here

http://www.androidpolice.com/2011/03/01/the-mother-of-all-android-malware-ha
s-arrived-stolen-apps-released-to-the-market-that-root-your-phone-steal-your
-data-and-open-backdoor/

http://www.androidpolice.com/2011/03/02/update-on-the-malware-monster-droidd
ream-is-an-android-nightmare-and-weve-got-more-details/

http://blog.mylookout.com/2011/03/security-alert-malware-found-in-official-a
ndroid-market-droiddream/



___List___
Advanced App to SD
Advanced Barcode Scanner
Advanced Compass Leveler
Advanced Currency Converter
Advanced File Manager
Advanced Sound Manager
App Uninstaller
Basketball Shot Now
Best password safe
Bowling Time
Bubble Shoot
Chess
Color Blindness Test
Dice Roller
Falldown
Falling Ball Dodge
Falling Down
Finger Race
Funny Face
Funny Paint
Hilton Sex Sound
Hot Sexy Videos
Magic Hypnotic Spiral
Magic Strobe Light
Mr. Runner
Music Box
Omok Five in a Row
Panzer Panic
PewPew
Photo Editor
Piano
Quick Delete Contacts
Quick Notes
Scientific Calculator
Screaming Sexy Japanese Girls
Sexy Girls: Japanese
Sexy Legs
Spider Man
Super Guitar Solo
Super History Eraser
Super Ringtone Maker
Super Sex Positions
Super Sexy Ringtones
Super Stopwatch & Timer
Supre Bluetooth Transfer
Task Killer Pro
Tie a Tie

 

Josh More | Senior Security Consultant - CISSP, GIAC-GSLC Gold, GIAC-GCIH
Alliance Technologies |  <http://www.AllianceTechnologies.net>
www.AllianceTechnologies.net
400 Locust St., Suite 840 | Des Moines, IA 50309
515.245.7701 | 888.387.5670 x7701

Blog: Don't just blame the bad guys, it's your fault too
 <http://www.alliancetechnologies.net/blogs/morej>
http://www.alliancetechnologies.net/blogs/morej

How are we doing? Let us know here:
http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-sur
vey

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cialug.org/pipermail/cialug/attachments/20110302/99a4de0d/attachment.html>