Shiftybug/Shuanet/Shedun Malwares - ZenFone 2 General

Hi All,
Please go through this,
https://blog.lookout.com/blog/2015/11/04/trojanized-adware/
Anybody has come up with any method to detect it or remove it if it is there?
It's a very serious security threat for our devices., especially for those who has a habit of installing Full/Cracked Apps from third party stores/websites.
Be aware friends..

From what i have seen on other sites, flashing the rom is the only solution.
A full Wipe of the phone is not solving the issue.
But i am interested to see if anyone has an idea how to check wheter a phonne is concerned.

No tool to check yet. However, why do you care about those people who are installing cracked apps? They are doing so illegally and bringing down the revenue for the app developer. They deserve this.
If this makes it onto the Google Play Store then yes it should be an issue, other than that no there should not be a concern to it.

Christopher876 said:
No tool to check yet. However, why do you care about those people who are installing cracked apps? They are doing so illegally and bringing down the revenue for the app developer. They deserve this.
If this makes it onto the Google Play Store then yes it should be an issue, other than that no there should not be a concern to it.
Click to expand...
Click to collapse
Wow, i hope you don't say that seriously.

Christopher876 said:
No tool to check yet. However, why do you care about those people who are installing cracked apps? They are doing so illegally and bringing down the revenue for the app developer. They deserve this.
If this makes it onto the Google Play Store then yes it should be an issue, other than that no there should not be a concern to it.
Click to expand...
Click to collapse
LOL that's a bit curel.
But using Android in iOS way loses tons of fun. There are way much more tools beyond Play store… Besides a security exploit itself is worth the consern.
来自我的 ASUS_Z00ADA 上的 Tapatalk

No app are NOT released on the Playstore, Beta version of applications that google don't want to place on it.
So yes, this still is a concern specially when a full wipe is not solving the issue.

Related

Android Store Websites/Freeware

sorry guys just trying to be helpful to thoes seeking more information about the phone... someone on that site has there hands on the phone already! and is willing to answer any questions you guys might have!
who vincent?. who has it
I have one if anyone has any questions..
Memory leak
The person who has the G1 phone on androidcommunity says it has a bad memory leak and he has to reboot often. Have you seen the same thing?
He also said there was no file folder system and it was hard to find files. Is this true?
Thanks,
Tim
and they have more everything
2 different app stores for android?
there is the android market..and maybe im crazy , but isnt there another app store for android?
can sum1 provide info ?
thanx
yeah they do have alot of stuff there. but ill be coming here for my apps and OS upgrades/ roms
cookzitall said:
there is the android market..and maybe im crazy , but isnt there another app store for android?
can sum1 provide info ?
thanx
Click to expand...
Click to collapse
lol no its the android market goto http://androidcommunity.com you will find everything android there have fun.
There's also http://www.trackdroid.com and http://android-freeware.org
I've noticed that using Android Market on different ROM versions, different apps show up in the Android Market.
i dont have all the apps on my market app, really sucks
Found new app site!
GlobalM3 said:
i dont have all the apps on my market app, really sucks
Click to expand...
Click to collapse
Guys i found a new site with apps...and it seemd very well designed and have some short of application that u install and then u download what u need.
Nice to see some other places ecxept google market
www.slideme.org
wizzo65 said:
Guys i found a new site with apps...and it seemd very well designed and have some short of application that u install and then u download what u need.
Nice to see some other places ecxept google market
www.slideme.org
Click to expand...
Click to collapse
I'm going to wait to read reviews on some of these non-google sponsored android marketplaces as I think that's where the malware is going to show up. The user is always the biggest hole in any security plan.
http://www.android-freeware.org/ Do Not attempt
DO NOT DOWNLOAD ANY FREEWARE ON OTHER SITES. Thier is a reason that it is not in the android app store. I downloaded a program from http://www.android-freeware.org/ and it crashed my device and since T-Mobile will not support it yet, its useless at the moment.
Be patient wait for all the apps to load in the market.
Hope this saves someones device
Ok so I tried:
Took sim out and booted up in Safe mode. Was able to actually open the menu and go into settings. I went into applications and the error came up again.
So I had to master reset the device and it is now working back to normal
It's a bit blanket to say to not download any apps from a site just because a beta app crashed your device.. There are many apps there from many different developers, and while some may be quite unstable, some may also be fairly good..
It was my understanding that the Android Market would be similarly unregulated, so I honestly think you'd have the same chance of finding a app that has some issues there as you would at another site.
It would help to know which app you were trying to use that crashed, so we know which app to avoid.
chorca said:
It's a bit blanket to say to not download any apps from a site just because a beta app crashed your device.. There are many apps there from many different developers, and while some may be quite unstable, some may also be fairly good..
It was my understanding that the Android Market would be similarly unregulated, so I honestly think you'd have the same chance of finding a app that has some issues there as you would at another site.
It would help to know which app you were trying to use that crashed, so we know which app to avoid.
Click to expand...
Click to collapse
Here is my take on this. Google has never said that the Android Market would be unregulated. They would be idiots to say that and even bigger idiots to actually follow through on that. They've made a huge investment in Android and intend for it to grow. To protect their investment I am positive that there is a team of android employees who's job it will be to regularly download and test new apps, especially from new/untested developers to make sure that 1. it's not malware 2. it doesn't crash the OS or cause any other problems. This is protecting their investment.
What I have heard as regards to the android market is that it will not be heavily regulated like the apple market. For example Apple refuses to let you sell apps that compete with one of their own products, or a product they have in development.
Thus my thought is this. The most amount of regulation that Android apps on google's Android Market will undergo will be minimal. Most legit developers will not have a problem setting up space on the market, and getting their apps out to users. So, given that, what are you likely to find elsewhere? Apps that don't even meet the basic requirements of the Android Market. Apps that are malware, or will crash the OS, or snake oil salesmen trying to make a quick buck, and thus can't/won't be allowed on the Android Market (or will be removed quickly) That equals problems in my book, and there is no way I'm going to download anything that's not at the Android Market, at least not for a very long time. If it's legit, it should be at the Android Market where I can trust it.
thanks for the tip, will trust your experience and leave apps that aren't in the market alone. Thank god you got yours working again!!!
GlobalM3 said:
DO NOT DOWNLOAD ANY FREEWARE ON OTHER SITES. Thier is a reason that it is not in the android app store. I downloaded a program from http://www.android-freeware.org/ and it crashed my device and since T-Mobile will not support it yet, its useless at the moment.
Be patient wait for all the apps to load in the market.
Hope this saves someones device
Click to expand...
Click to collapse
Which app did this?
thanks,
jason
yeah, i was looking at that site and some of those apps look pretty cool, what app was it that crashed your phone?

No Movies for Rooted XOOMs?? Devs unite!

Being that this dev community is the absolute best, I have to bring this to light.
Google Movie Support has just informed me that Google Movies will not work for rooted XOOMs. This just won't fly.
Is there anyone out there working on a fix or workaround for this?
I'd love root. I love movies. We shouldn't have to choose between the two.
gdogmcstyles said:
Being that this dev community is the absolute best, I have to bring this to light.
Google Movie Support has just informed me that Google Movies will not work for rooted XOOMs. This just won't fly.
Is there anyone out there working on a fix or workaround for this?
I'd love root. I love movies. We shouldn't have to choose between the two.
Click to expand...
Click to collapse
I feel ya bro, and I'm pretty sure the devs are already looking into it. Since it is a DRM authorization issue, it is probably going to be a pretty good hack to get around it.
I'm confused by 2 things on this topic:
1) why does it matter if its rooted or not?
I would assume the answers is because root would allow us some magical privledge of copying a cache and possibly extracting video and then redistributing.
2) how the frig can it tell?
Sent from my SPH-D700 using XDA Premium App
that is why i cannot watch green hornet. i rented it to see how it would look on the xoom and it will not play
Kcarpenter said:
2) how the frig can it tell?
Click to expand...
Click to collapse
My guess is either one of: (1) checking for the ro.secure property being set, or (2) doing something "rootable", like being able to read a certain file/directory, etc.
If in the former case, I don't have an idea of what to do that wouldn't require the HC source, but in the case of the latter, it'd be relatively easy to ... wait- don't let me help El Goog out. It's not rocket science (think rootkit, but in reverse).
Well instead of listening I tried it as well with The Green Hornet and couldn't download it. Kept getting error but these developers will come up with the answers they have been nothing short of amazing when it comes to the Moto Xoom
Sent from my Xoom using Tapatalk
kcrudup said:
My guess is either one of: (1) checking for the ro.secure property being set, or (2) doing something "rootable", like being able to read a certain file/directory, etc.
If in the former case, I don't have an idea of what to do that wouldn't require the HC source, but in the case of the latter, it'd be relatively easy to ... wait- don't let me help El Goog out. It's not rocket science (think rootkit, but in reverse).
Click to expand...
Click to collapse
Assuming scenario 2, wouldn't Super User prompt for permissions? I would think its likely.
Sent from my SPH-D700 using XDA Premium App
This is the same with the blockbuster app on the Atrix. I can set SU to block requests from the app, but as long as I'm running rooted, it refuses to play (and tells you when you launch the app).
I don't understand the difference between this and running Itunes or Netflix on a "rooted" (admin capable) PC. Why is the phone different?
This is not development. Moved to general.
theimpaler747 said:
This is not development. Moved to general.
Click to expand...
Click to collapse
Your forum, you run it your way, just a question.
With all due respect, couldn't OP remain if modified to [REQUEST] since it's a dev request? General is so filled with crap I think this may get lost. :/
bishop72 said:
that is why i cannot watch green hornet. i rented it to see how it would look on the xoom and it will not play
Click to expand...
Click to collapse
So did you still get charged for it? The wifi version won't even get the movies for awhile. I don't know why Google doesn't have it ready for both.
It isn't very surprising to hear. None of the major studios will allow media to be downloaded without some form of restrictive DRM and root access probably violates their policies.
rebill said:
So did you still get charged for it? The wifi version won't even get the movies for awhile. I don't know why Google doesn't have it ready for both.
Click to expand...
Click to collapse
? I saw the movie link in Web version of Market.
Yeah, you can order/get charged for it but it won't work. Need to contact customer service to get a refund. They told me they'll consider putting in a warning in the future before you buy it.
cur8or said:
Yeah, you can order/get charged for it but it won't work. Need to contact customer service to get a refund. They told me they'll consider putting in a warning in the future before you buy it.
Click to expand...
Click to collapse
Would make more sense for it to check if you're rooted before the transaction goes through.
Nice Google, what a great way to pit the development community against you, even though Android would be nothing without us. Sellout.
Strange, I have unlocked and rooted Nexus One and could play any Netflix video in official Netflix app, so DRM works on rooted system. So may be it's problem with something else?
If you order thru your web browser by going to the web based android market and play it thru your web browser it works.
Thanks for the tip on the browser market thing it works
Sent from my Xoom using Tapatalk
nbajwill55 said:
Nice Google, what a great way to pit the development community against you, even though Android would be nothing without us. Sellout.
Click to expand...
Click to collapse
Lol you're an idiot. It isn't googles fault they had to do this. If you were selling movies and wanted to make some money, would you want them to be distributed for free without your permission? I think not...

Do I need antivirus software for my Galaxy Note?

New to smartphones, I was just wondering do I need an antivirus for my Galaxy Note? And if the answer is yes, what do you guys recommend?
All you need to know about this subject is right here.
Regards,
Dave
foxmeister said:
All you need to know about this subject is right here.
Regards,
Dave
Click to expand...
Click to collapse
That's exactly the article I read that made me ask the question
Since it came from google, the manufacturer of android, I think they would try to protect the integrity of their product, so I am not sure....
Checkout these articles: http://www.neowin.net/news/free-android-anti-virus-products-virtually-useless - http://www.neowin.net/news/wp7-avg-antivirus-app-is-possibly-spyware
I personally feel Google trying to do their down things does allow malware to get in once a while and need to improve Android security. I am more worried with the privacy issue (Carrier IQ). I still feel there is a level of openness with Android, its not entire open source, but at least you can see something unlike some competing mobile os.
Personally I use AdFree (which does more than block ads since it block malware sites from loading, it basically adds IP blocklist to your /etc/hosts file, which you can also do manually) and LBE Privacy Guard (which seems to be a great concept allowing to deny permissions of apps, my only concern of it is being closed source, there is a big thread about it).
having an antivirus is useful. a few months ago my motorola atrix was having a bug where the screen would only light up when i first turned it on. if i locked it and then tried to unlock it, the screen would work, but the backlight wouldnt work.
i grabbed dr. web light, not expecting it to really do anything. ended up finding malware, and after removing the malware, screen backlight started working properly again.
on a phone like the galaxy note, theres more than enough processing power to run a background virus scanner without running out of puff, so i say, why not?
The answer to this question is really quite simple, it depends on this:
Do you carefully watch the permissions of apps you are about to install?
If your answer is: "yes, I carefully watch the permissions and don't install apps such as tetris which wants access to sms" then you can quite safely go without any anti malware software.
If your answer on the other hand is: "no, I just install interesting apps and quickly click through the permission page to start the download" then yes, you might benefit of software to protect your device.
The beauty of Android is that whatever app you are about to install INCLUDING malware states clearly what part of your device it is going to access. If people don't bother reading the permissions then a big part of fault is on them also. However this isn't really too well explained, especially for new users, so I assume a majority of users don't really understand WHY the permissions are shown before downloading an app. This is something Google could improve on in my opinion.
And lastly, the fact that apps coming to Apples app store are screened doesn't make it any more secure than Android. It just has people making the choices FOR you. If something well hidden is slipped past them, not a single user will know about the threat. Just as one app developer showed in public a few weeks ago and as a result got his developer status cancelled by Apple.
edit
Also a small note here. A virus is something that multiplies and spreads (weather it's bacteria or code doesn't matter). The malicious apps in the market are malware and spyware and because of this the word antivirus for Android isn't really correct. They don't stop viruses, they stop malicious apps.
edit 2
here's the link to the story of that Apple developer:
http://www.forbes.com/sites/andygre...per-program-for-proof-of-concept-exploit-app/
this just proves that app store isn't any more secure than Android market. It just has people who take a look at apps before they are approved, and as you can read, they are far from perfect.
How many of you guys use Antivirus?
Who here does not feel the need?
Does Google recommend it like Windows does for PC? (already read the article from one Google guy saying Antivirus companies are playing on our fears, but he is only one guy)
And to those who have used antivirus software, which software did you use on your Note specifically and has it slowed down your Note or increased the battery consumption?
knowsnophones said:
How many of you guys use Antivirus?
Who here does not feel the need?
Does Google recommend it like Windows does for PC? (already read the article from one Google guy saying Antivirus companies are playing on our fears, but he is only one guy)
And to those who have used antivirus software, which software did you use on your Note specifically and has it slowed down your Note or increased the battery consumption?
Click to expand...
Click to collapse
You already have a couple fairly comprehensive answers to your first post but I'll answer these questions too:
I do not use any antivirus and I do not feel the need to
Aside from that article, I haven't seen a single mention from Google about needing any antivirus at all.
The so called antivirus programs that are made for Android right now suck. They don't stop enough malware to be worth the money or effort, here's a few source links for evidence: http://www.extremetech.com/computin...rus-apps-are-useless-heres-what-to-do-instead and http://www.informationweek.com/byte/news/231902823
Just by using common sense you will be fine with no antivirus app. If you really want an antivirus app, then go get it. It will be close to useless and it won't stop all threats anyway so you will still have to use common sense to be protected anyway.
I installed avast. it is free and no it doesn't slow down my note.
friedje said:
I installed avast. it is free and no it doesn't slow down my note.
Click to expand...
Click to collapse
I got the AVG pro, might not really need it since I´m kind of anal about what I install on the GNOTE... But better safe than sorry...
+1 doesn´t slow things down.
akselic said:
You already have a couple fairly comprehensive answers to your first post but I'll answer these questions too:
I do not use any antivirus and I do not feel the need to
Aside from that article, I haven't seen a single mention from Google about needing any antivirus at all.
The so called antivirus programs that are made for Android right now suck. They don't stop enough malware to be worth the money or effort, here's a few source links for evidence: http://www.extremetech.com/computin...rus-apps-are-useless-heres-what-to-do-instead and http://www.informationweek.com/byte/news/231902823
Just by using common sense you will be fine with no antivirus app. If you really want an antivirus app, then go get it. It will be close to useless and it won't stop all threats anyway so you will still have to use common sense to be protected anyway.
Click to expand...
Click to collapse
Just because YOU feel superior to most other users, doesn't mean that they have the knowledge or enough 'common sense' to understand the permissions some apps ask for. The fact that an antivirus is not 100% safe doesn't mean it is 100% useless.... If it stops just one threath it already made sense..
There are lots of good FREE antivirus programs so where is the reason NOT to install one ???
There are also ppl that don't take medics, because if they or their children die from FLU that was Gods will.......
Maybe you should consider that not all users of a smartphone are IT-gods like you
friedje said:
I installed avast. it is free and no it doesn't slow down my note.
Click to expand...
Click to collapse
ville7805 said:
I got the AVG pro, might not really need it since I´m kind of anal about what I install on the GNOTE... But better safe than sorry...
+1 doesn´t slow things down.
Click to expand...
Click to collapse
I have both installed, no slowdown issues and was running LBE too, may switch to droidwall or turn LBE back on. Worth noting the AVG pro is free if you qualify for the Samsung Hub exclusives.
Dave
I am using Lookout anti-virus ever since my first Android more than a year ago. It's never given me a hic-cup even when scanning.
Also, anyone knows an App which lists which App has what permission in a list form?
Thanks!
Sent from my GT-N7000 using Tapatalk
Does a free antitrust do as good a job as a paid one
Sent from my GT-N7000 using xda premium
ChimpNippl3s said:
Does a free antitrust do as good a job as a paid one
Sent from my GT-N7000 using xda premium
Click to expand...
Click to collapse
For now they all do a rather lousy job, the free and the paid ones.
But the paid ones seem to score a bit better.
I installed LBE aswell, but you need root for it to work well.
Same goes for avast, it prefers having root access.
I use avg on my galaxy tab, works without any issues.
friedje said:
Just because YOU feel superior to most other users, doesn't mean that they have the knowledge or enough 'common sense' to understand the permissions some apps ask for. The fact that an antivirus is not 100% safe doesn't mean it is 100% useless.... If it stops just one threath it already made sense..
There are lots of good FREE antivirus programs so where is the reason NOT to install one ???
There are also ppl that don't take medics, because if they or their children die from FLU that was Gods will.......
Maybe you should consider that not all users of a smartphone are IT-gods like you
Click to expand...
Click to collapse
No need to over react mate. I'm no IT-god, or a nerd or anything like an "advanced" user. The only common sense that I was referring to is something that everyone has. If you can read what the apps do, then you can read the permissions before installing them. There is no need to be an expert.
If you are installing a single player offline game that asks permissions for sms, phone calls and contacts and it isn't blacklisted by those antivirus apps yet, then it won't be detected and you can only blame yourself when you get a 600$ phone bill because the app has sent messages to premium numbers. It's not rocket science, just common sence.
If the tests conclude that 90% of androids antivirus programs manage 10-20% of malicious apps and you still want one, then go ahead and get one. No need to get offended when people are trying to give advice.

Mobile security on smart phones (ANDROID)

anyone know much about the sercurity on the phone?
recently i read about this new free security app called on NQ mobile.
http://www.redmondpie.com/nq-mobile...st-solution-against-malware-viruses-and-more/
i installed it and noticed that it really drains the battery (seems like if toggles apps that aren't even opened into its memory). so it got me thinking .. is it really worth it to install apps like these for anti-virus's, maleware, etc.. ?
did a search and it seems the top three as of March 20th are:
Kaspersky Mobile Security (not free)
Lookout Security & Antivirus (free)
F-Secure Mobile Security (more for parental control)
not too sure where NQ would fit into the picture since the article came out on april 11th.
anyhow anyone with any idea such programs on the android is worth the draw back on power consumption and security risk please comment!
thanks.
IMO I don't think there is an antivirus app out there that would serve its purpose... It's more common sense... There's a good reason why when you try to download non market apps that you have to read that little disclaimer and check the box to allow them to install... Know what the apps do, if it doesn't need a permission or if you dont think it needs a permission then don't install it...
Sent from my HTC Sensation 4g Rocking ARHD 6.6.2
wapena92 said:
IMO I don't think there is an antivirus app out there that would serve its purpose... It's more common sense... There's a good reason why when you try to download non market apps that you have to read that little disclaimer and check the box to allow them to install... Know what the apps do, if it doesn't need a permission or if you dont think it needs a permission then don't install it...
Sent from my HTC Sensation 4g Rocking ARHD 6.6.2
Click to expand...
Click to collapse
Very good advice. Also, keep really sensetive stuff to a minimum. If you can bank on your computer, do it.
I just flash another ROM every couple of days and get my apps from the market. Lol
i hear ya both..
so basically in, layman's terms, these so called "security" apps dont do squat?
and you should just keep personal and secured stuff off these devices and perhaps use a laptop to access key information (like banking and emails)?
I am not sure what you mean when you refer to some apps as non-market apps. think all the security apps i mentioned are available through the android market (aka Play Store).
Not the security apps. By non-market apps we mean any apk's installed that you get any place but the play store.
estallings15 said:
Not the security apps. By non-market apps we mean any apk's installed that you get any place but the play store.
Click to expand...
Click to collapse
thanked you both. .
i see.. guess i am not keen on where else you can get apk files other than the market place (play store) .
so bottom line is no need install these "security apps" cause they dont do anything?
junkiee24 said:
thanked you both. .
i see.. guess i am not keen on where else you can get apk files other than the market place (play store) .
so bottom line is no need install these "security apps" cause they dont do anything?
Click to expand...
Click to collapse
No, they do behind the scene stuff. Lookout scans ALL your apps, just to check for anything malicious. Lookout has some kind of backup, but I never use it. When I bought my myTouch, my T-Mobile rep installed about 5 must have apps on my phone, and Lookout was #1 on his list. I've been using it on every ROM I've had. Hope this helps!
EDIT: You can get apks from the internet. Specifically pirated apps. People do not want to pay for the app, so they download it online. But people could have modified that apk and but a virus or who knows what in that apk. So it's best to keep an anti virus app. Lookout scans a new app each time I install/update it.
invasion2 said:
No, they do behind the scene stuff. Lookout scans ALL your apps, just to check for anything malicious. Lookout has some kind of backup, but I never use it. When I bought my myTouch, my T-Mobile rep installed about 5 must have apps on my phone, and Lookout was #1 on his list. I've been using it on every ROM I've had. Hope this helps!
EDIT: You can get apks from the internet. Specifically pirated apps. People do not want to pay for the app, so they download it online. But people could have modified that apk and but a virus or who knows what in that apk. So it's best to keep an anti virus app. Lookout scans a new app each time I install/update it.
Click to expand...
Click to collapse
Cool.. so now the questions is which security app is better.. Lookout or this NQ one.. ill go ahead and try lookout and see how much battery drain i get.
i dont download any apks outside of the market. but i hear there were a few places that had pirated apks but i guess i never trusted them (blackmarket). its not like Cydia for the iOS, where the apps are safely cracked.. atleast i think they are. so with a security app i guess it would alert you if the apk is corrupt - nice.
Thanks again.
junkiee24 said:
Cool.. so now the questions is which security app is better.. Lookout or this NQ one.. ill go ahead and try lookout and see how much battery drain i get.
i dont download any apks outside of the market. but i hear there were a few places that had pirated apks but i guess i never trusted them (blackmarket). its not like Cydia for the iOS, where the apps are safely cracked.. atleast i think they are. so with a security app i guess it would alert you if the apk is corrupt - nice.
Thanks again.
Click to expand...
Click to collapse
I don't get any battery drain with Lookout. Hope you experience the same thing mate.
I used lookout for a little while, but then I realized that I only need it if I'm careless, which I'm not.
SECURITY!!!
Lookout is very good but since I'm rooted Avast free works wonders beyond basics. van allow which apps have internet access etc. must have for me. very nice on batt.
Has anyone ever had, or known anyone who got a virus or anything on a smartphone? Personally I haven't. Therefore I don't use any type of protection, which I probably should.
Sent from my HTC Glacier using XDA Premium
No, I don't know anyone who ever got malicious SW or any type of virus on Android. For the same reason I never heard of anyone getting a virus on Linux. And for the same reason, I don't have any apps that are made to protect me from things that aren't a threat.
estallings15 said:
Very good advice. Also, keep really sensetive stuff to a minimum. If you can bank on your computer, do it.
Click to expand...
Click to collapse
Right best option to do so...
junkiee24 said:
i hear ya both..
so basically in, layman's terms, these so called "security" apps dont do squat?
and you should just keep personal and secured stuff off these devices and perhaps use a laptop to access key information (like banking and email)
Click to expand...
Click to collapse
The reason why they don't much is because there not meant for this kind of system... Android unique system is a little well very complex to make a antivirus app or that would find malware... There are so many ways around it...
It's amazing... There's an article I read that explained this...
I'm gonna see if I can find it and post the link
Jack_R1 said:
No, I don't know anyone who ever got malicious SW or any type of virus on Android. For the same reason I never heard of anyone getting a virus on Linux. And for the same reason, I don't have any apps that are made to protect me from things that aren't a threat.
Click to expand...
Click to collapse
Well you should look around the web... You'll be surprised want you'll find... The threat on smartphones is very high... It's pretty scary...
If I find any of those articles ill post a link...
Sent from my HTC Sensation 4g Rocking ARHD 6.6.2
junkiee24 said:
i dont download any apks outside of the market. but i hear there were a few places that had pirated apks but i guess i never trusted them (blackmarket). its not like Cydia for the iOS, where the apps are safely cracked.. atleast i think they are. so with a security app i guess it would alert you if the apk is corrupt - nice.
Thanks again.
Click to expand...
Click to collapse
Those security apps don't really know what there looking for... It's a lot different then windows OS... They don't need much to mess around with your info...
Sent from my HTC Sensation 4g Rocking ARHD 6.6.0
http://www.xda-developers.com/android/major-facebook-sdk-vulnerability-run-for-the-hills/
There are good people out there but that's not always the case...
Vulnerability is everywhere...
It's hard to make an app with little mistakes as possible... Making an app period is hard... I've tried and failed horribly at it lol so I can just imagine how hard it is to take out those nicks, bugs and issues that causes problem like this
http://www.lifehacker.com.au/2011/11/do-android-antivirus-apps-actually-do-anything/
So people think otherwise from me...
Here is their opinion... I take this very lightly...
http://www.extremetech.com/computin...s-apps-are-useless-heres-what-to-do-instead/2
Here's with what I agree with...
Like I said some disagree.....
http://m.zdnet.com/blog/hardware/premium-rate-sms-trojans-hit-googles-android-market/17070
And here a small case of sms trojan that hit a little while back...
Just some things to read and think about...
Sent from my HTC Sensation 4g Rocking ARHD 6.6.2
It all boils down to not downloading crappy, unknown apps, and if downloading - checking their permissions. Trojans hit people who don't understand anything and don't have control over their apps (not that there aren't enough of those). Other threats are virtually non-existent.
true.. i am trying avast now.. pretty cool.
thanks everyone!
Exactly that simple lol
And no problem... Keep it safe
Sent from my HTC Sensation 4g Rocking ARHD 6.6.2

Master Key Exploit patch?

Has HTC push the patch? Samsung already roll out security patches to S4. I Just scanned, my ONE is unpatched/vulnerable.
Here’s How You Can Check If Your Android Device Is Patched Against The Master Key Exploit.http://www.redmondpie.com/check-if-your-android-device-is-patched-against-the-master-key-exploit/
Sent from my HTC One using xda app-developers app
the Google Edition roms are patched
IINexusII said:
the Google Edition roms are patched
Click to expand...
Click to collapse
THe sense based roms have not been patched yet but when i reached out to them they said that it will be resolved soon with a update. They could not give me an ETA on when it would be coming out but assured me they take it very seriously and are working hard to get it rolled out.
crackeyes said:
THe sense based roms have not been patched yet but when i reached out to them they said that it will be resolved soon with a update. They could not give me an ETA on when it would be coming out but assured me they take it very seriously and are working hard to get it rolled out.
Click to expand...
Click to collapse
That app says I'm patched and I'm running InsertCoin with the latest elementalX. I wonder if the master key patch is in the kernel. If so, that makes sense.
Sent from my HTC One using Tapatalk 2
It appears 4.2.2 build/soft no. 2.24.401.1 / HTC 5.34 is patched as well :good:
@Wiss said:
It appears 4.2.2 build/soft no. 2.24.401.1 / HTC 5.34 is patched as well :good:
Click to expand...
Click to collapse
What CID and OTA or custom Rom?
Sent from my HTC One using Tapatalk 4 Beta
Ye in the last OTA it is patched. The 4.2.2
My One is "patched." I don't download warez, steal paid apps, or install third-party app stores that are untrusted.
I have no sympathy for anyone who does the above and gets their phone jacked up.
BTW Can someone give us a technical (not too technical) explanation of what is this ?
Thanks.
KekeJr said:
BTW Can someone give us a technical (not too technical) explanation of what is this ?
Thanks.
Click to expand...
Click to collapse
Applications are cryptographically signed. The idea is that another software house or or anybody else can't come up with an "update" to that app, as the signature will be different.
The exploit allows exactly that to happen.
Lets say you download Google maps v7 from the internet because you're impatient, and you install it over the top of the existing one. In theory, if it succeeds, it must have come from Google and hasn't been tampered with to install a Trojan or virus or whatever.
With this exploit, the apk can be modified whilst retaining the same signature. Basically you can't trust downloads that didn't come from the play store until the exploit is patched.
BenPope said:
Basically you can't trust downloads that didn't come from the play store
Click to expand...
Click to collapse
Fixed.
This is, and has been, true for every single Android "security issue, virus alert, malware warning," etc that's ever existed.
Sent from my HTC One
BenPope said:
Applications are cryptographically signed. The idea is that another software house or or anybody else can't come up with an "update" to that app, as the signature will be different.
The exploit allows exactly that to happen.
Lets say you download Google maps v7 from the internet because you're impatient, and you install it over the top of the existing one. In theory, if it succeeds, it must have come from Google and hasn't been tampered with to install a Trojan or virus or whatever.
With this exploit, the apk can be modified whilst retaining the same signature. Basically you can't trust downloads that didn't come from the play store until the exploit is patched.
Click to expand...
Click to collapse
First i want to thank you !
Second: ....so, basically this means that it was not that BAD... as the media said !
We all knew that only Play store has trustable content.
Thanks, again !
This patch is in a play store update not an Android update. I have it in play store 4.1.10, there is an app which lets you check I think it's called bluebox or something.you can also check in Google settings if you have an option to verify apps.
unremarked said:
Fixed.
This is, and has been, true for every single Android "security issue, virus alert, malware warning," etc that's ever existed.
Sent from my HTC One
Click to expand...
Click to collapse
That's funny, because the app store is littered with adware and malware. Just a few days ago, there was an app in the top 20 that was clearly malware, and it remained there for weeks before (presumably) being pulled off. As a general rule, I don't download any apps that require the "run at startup" or "install shortcuts" permissions, unless I fully trust the developer. By the way, there's an easy solution; Google could let us control our own privacy settings (like every other OS on the market), but then again, that would eat into their bottom line After all, Google's business model is to literally steal user data and sell it to others.
unremarked said:
Fixed.
This is, and has been, true for every single Android "security issue, virus alert, malware warning," etc that's ever existed.
Sent from my HTC One
Click to expand...
Click to collapse
It's easy to put malicious apps on the play store since there's no review process like apple, but things tend to get flagged quickly.
Basically don't install a calculator app that has full phone/internet/device permissions
The android security model is actually quite good IMO, there's been some exploits but everybody has them (not just android) and they get patched relatively quickly. Potential exploits aside it's actually quite good.
Sent from my HTC One using Tapatalk 2
REDACTED
Sent from my HTC One using xda app-developers app
WhatsAUsername said:
That's funny, because the app store is littered with adware and malware. Just a few days ago, there was an app in the top 20 that was clearly malware, and it remained there for weeks before (presumably) being pulled off.
Click to expand...
Click to collapse
Really? What app was that? I mean, I get annoyed at Candy Crush Saga spam too, but I hardly consider it malware.
WhatsAUsername said:
By the way, there's an easy solution, Google could let us control our own privacy settings (like every other OS on the market), but then again, that would eat into their bottom line After all, Google's business model is to literally steal user data and sell it to others.
Click to expand...
Click to collapse
You're kidding yourself if you think Apple or Microsoft isn't collecting as much data about you as they can and doing what they want with it. Beyond that, I always take point with folks who accuse any company of "stealing your information." They're not. You're freely giving them access to it (as outlined in that Terms of Service/ELEU agreement you don't read) to utilize their services. If you don't want them to have your info, then don't share your info with them.
bbedward said:
It's easy to put malicious apps on the play store since there's no review process like apple, but things tend to get flagged quickly.
Click to expand...
Click to collapse
Halfway true. It's more difficult than you think to get malicious apps on the Play store. Most of the "successful" attacks have been from someone uploading the 1.0 version of their app(which is perfectly clean, and passes inspection by Google Bouncer) then pushes an update to it with some of the malicious code. As you noted, it usually gets flagged and removed at this point. The other way I've heard of people getting "infected" from apps off the Play store is when the author ties their ads into a nasty website, tricks the user into clicking on it, then further tricks them into downloading an unsigned/untrusted APK.
Yup, as long as your not doing some silly things like getting you apps from the Pirate Bay or Joes crazy world of underground apps you will be more or less safe.
godutch said:
This patch is in a play store update not an Android update. I have it in play store 4.1.10, there is an app which lets you check I think it's called bluebox or something.you can also check in Google settings if you have an option to verify apps.
Click to expand...
Click to collapse
I don't think the update patch is on play store. Latest update scan tell's you to Ask your device vendor for update. So it should be security update OTA from HTC?
Sent from my HTC One using xda app-developers app
alanchai said:
I don't think the update patch is on play store. Latest update scan tell's you to Ask your device vendor for update. So it should be security update OTA from HTC?
Sent from my HTC One using xda app-developers app
Click to expand...
Click to collapse
Check your play store version I have 4.1.10 and I am patched

Categories

Resources