mobilemalwareinthewild

mobilemalwareinthewild内容摘要：

to $ per user per month • IMEI information can be used to spoof blacklisted phones Stealing User Credentials • Malwares can intercept SMS to circumvent twofactor authentication – Done in conjunction with phishing on desktops • Keylogging and scanning documents for passwords • Application sandboxing prevents most of these Premium‐Rate Calls and SMS • Premium‐rate calls and SMS directly benefits adversaries – Few dollars per minute or SMS • 24 of the 46 malwares send these – Mostly on Android and Symbian • iOS avoids this by always showing Confirmation for outgoing SMS messages SMS Spam • Distributing spam origin makes blocking harder • Less noticeable when having unlimited SMS • Phone numbers are more “reliable” than e‐mail • Can be prevented by enforcing SMS to be sent from a designated confirmation window Search Engine Optimization (SEO) • Clicks on a certain link on a search query to increase visibility • Phishing websites use this technique, along with desktop malware • Can be prevented with affixing an applic。