F From Nothing to Massive N thi t M i Android under Attack Vi - - PowerPoint PPT Presentation

▶
f from nothing to massive n thi t m i android under attack
SMART_READER_LITE
LIVE PREVIEW

F From Nothing to Massive N thi t M i Android under Attack Vi - - PowerPoint PPT Presentation

Feb 16, 2023 273 likes •495 views

F From Nothing to Massive N thi t M i Android under Attack Vi Vicente Diaz t Di Senior security analyst It It s Sept It It s Sept September September ember so ember, so so we so we we we ... ... Sep 22, 2011 The

slide-1
SLIDE 1

F N thi t M i From Nothing to Massive – Android under Attack

Vi t Di Vicente Diaz Senior security analyst

slide-2
SLIDE 2

It It´s Sept September ember so so we we It It s Sept September ember, so so we we ... ...

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-3
SLIDE 3

Question Question 1 Question Question 1

How many of you have a mobile phone? How many of you have a mobile phone?

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-4
SLIDE 4

Question Question 2 Question Question 2

Do you think you have Do you think you have something valuable g in your mobile phone?

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-5
SLIDE 5

Question Question 2 ( 2 (again again) Actually probably more things than you think Question Question 2 ( 2 (again again) …Actually, probably more things than you think

Sep 22, 2011 The Kaspersky Security Symposium, Munich

You probably don´t want everybody to see this

slide-6
SLIDE 6

Question Question 3 Question Question 3

Are there viruses for smartphones? Are there viruses for smartphones?

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-7
SLIDE 7

User A User Awareness areness Very Low

  • w!

User A User Awareness areness … Ve Very Low

  • w!

How do you estimate the malware infection risk when surfing the web from different devices?

SMARTPHONE PC / NOTEBOOK TABLET PC

(N= 132)

5.1 pts 5.1 pts

SMARTPHONE

(N= 1618)

4.7 4.7 pts pts

PC / NOTEBOOK

(N= 1518)

6.0 6.0 pts pts NO RI SK OF EXTREMELY HI GH NO RI SK OF MALWARE I NFECTI ON EXTREMELY HI GH RI SK OF MALWARE I NFECTI ON

1 2 2 3 3 4 4 5 5 6 6 7 7 8 8 9 9

Sep 22, 2011 The Kaspersky Security Symposium, Munich

  • Source: Smartphone Users Study for Kaspersky Lab
slide-8
SLIDE 8

My My Mobile W Mobile Was s Com

  • mpr

promised

  • mised So

So What hat? My My Mobile W Mobile Was s Com

  • mpr

promised

  • mised, So

So What hat?

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-9
SLIDE 9

Mobile Malw Mobile Malware are Hist istory Mobile Malw Mobile Malware are Hist istory

2000‐2004 2004‐2006 Th b i i 2006‐2008 Evolution 2008‐Now Monetization Proof of concepts The beginning (Symbian) Evolution (J2ME) Monetization (All platforms) Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-10
SLIDE 10

Mobile Malw Mobile Malware are Evolution lution Mobile Malw Mobile Malware are Evolution lution

65% growth of threats in 2010 over 2009

Number of Modifications

1600 1800 2000 1000 1200 1400 400 600 800

Source: Kaspersky Lab

200

jun.04 apr.05 jun.05 aug.05

  • ct.05

dec.05 feb.06 apr.06 jun.06 aug.06

  • ct.06

dec.06 feb.07 apr.07 jun.07 aug.07

  • ct.07

dec.07 feb.08 apr.08 jun.08 aug.08

  • ct.08

dec.08 feb.09 apr.09 jun.09 aug.09

  • ct.09

dec.09 feb.10 apr.10 jun.10 aug.10

  • ct.10

dec.10 feb.11 apr.11

Sep 22, 2011 The Kaspersky Security Symposium, Munich

Source: Kaspersky Lab

slide-11
SLIDE 11

Malw Malware f are for Smar r Smartphones tphones 20 2011 Malw Malware f are for Smar r Smartphones tphones, 20 2011

6% 1% 1% 23% Android Symbian Windows Mobile iOS 69% Blackberry

Source: Kaspersky Lab

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-12
SLIDE 12

Exam Example 1: ple 1: SMS F SMS Fraud aud Exam Example 1: ple 1: SMS F SMS Fraud aud Trojan dials international premium- t b th rate numbers every month

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-13
SLIDE 13

Exam Example 2: ple 2: Rick Rick in Y in Your iPhone ur iPhone Exam Example 2: ple 2: Rick Rick in Y in Your iPhone ur iPhone

  • Jailbroken Iphones first worm
  • Nice, we all LOVE Rick Astley,

don´t we?

  • However …

Sep 22, 2011 The Kaspersky Security Symposium, Munich

Mobile World Congress ‘Mobile Malware Threatscape in 2011’

slide-14
SLIDE 14

Exam Example 3: ple 3: Andr Android Mar

  • id Market 20

2011 Exam Example 3: ple 3: Andr Android Mar

  • id Market 20

2011

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-15
SLIDE 15

Main R Main Reason? ason? Main R Main Reason? ason?

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-16
SLIDE 16

But W But Wait it There’s There’s More

  • re

But W But Wait it, There’s There’s More

  • re

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-17
SLIDE 17

Social Engineering Social Engineering Attacks ttacks Social Engineering Social Engineering Attacks ttacks

  • Dear Mr. Foo (attacker knows who you are)
  • I´m calling you from your YourBank local
  • ffice in Chelsea (attacker knows where you
  • ffice in Chelsea (attacker knows where you

live and your bank).

  • In order to prevent fraud we need to check
  • In order to prevent fraud we need to check

some details, first I need to ensure you are the holder of the credit card with number the holder of the credit card with number xxx‐xxx‐xxx‐xxx (attacker knows your credit card) card).

  • Can you please tell me the number that

th b k f d?

Sep 22, 2011 The Kaspersky Security Symposium, Munich

appears on the back of your card? …

slide-18
SLIDE 18

Targe rgeted A ed Attacks ttacks Targe rgeted A ed Attacks ttacks

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-19
SLIDE 19

Summar Summary Summar Summary

  • Malware is targeting the most popular platforms

g g p p p

  • Profit‐driven
  • Authors unpunished

p

  • Social engineering + lack of user awareness
  • Devices easily accessed/stolen

e ces eas y accessed/sto e

  • How long does it take to jailbreak an iPhone?
  • More and more valuable data on them
  • Contacts
  • Agenda
  • Geo‐location

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-20
SLIDE 20

Recommendations commendations Recommendations commendations L k

  • Lock your screen
  • Use security software

k d

  • Back up your data
  • Use encryption
  • Beware of what you install
  • Do not jailbreak/root your device
  • Do not connect to untrusted Wi‐Fi access points
  • Do not skip updates

AND

  • Do not assume your mobile is safer than your PC

Sep 22, 2011 The Kaspersky Security Symposium, Munich

slide-21
SLIDE 21

[Vi t Di ] [Vicente Diaz] [vicente.diaz@kaspersky.com] [ 34 681244756] [+34 681244756] [@trompi]