Age-old trick with brand-new target
Monday, January 18, 2010
Cyber criminals have turned to a scam from the early days of the internet to target the growing smartphone market: Trojan phone dialers.
Much like their PC-based predecessors, the Trojan dialers violate a target's lax network security and install themselves on the smartphone. Once there, the dialer automatically makes numerous calls to premium phone numbers, creating excessively high charges on the victim's phone bill.
The new generation, according to PC World, also uses text messages to snare the unwary. A message will be sent to large group of phones at the same time, urging prospective victims to call a given number, which, unbeknownst to them, charges a "premium rate." A recording designed to keep victims on the line as long as possible then plays.
Experts say that the dialers generally infest pornographic websites and message boards, where they are disguised as "software, video clips, or helper programs," according to the BBC. F-Secure malware researcher Mikko Hypponen points out that, while PC-based malware cannot directly steal money, mobile malware is very much able to do so.
Related News:
Network security update not responsible for crashes - 2.24.2010 Reports of the so-called "blue screen of death" following the installation of the latest Microsoft security update are the result of malware, not a defect in the update.
Botnets and Chuck Norris take aim at network security - 2.22.2010 Last week, word spread of the Kneber botnet compromising more than 2,000 computers worldwide. With the start of a new week comes more malware attacks plaguing the web community. The so-called "Chuck Norris" botnet is attacking routers and DSL modems by guessing commonly used passwords.
Web security company warns of scareware's risk - 2.19.2010 The rise in scareware attacks and cyber criminal behavior in general forced DynaSis, an IT services company, to issue a warning to its users about the threat of fake anti-virus software infecting their computers on Friday.
Report: 'At least 34' firms attacked at the same time as Google - 1.15.2010 The Washington Post asserts that many U.S. companies were targeted in the same network security and email breach that affected Google and provoked the company's highly publicized spat with the Chinese government.
Gumblar botnet builder resurfaces with a vengeance - 1.7.2010 Though security researchers had believed it to be more or less dormant, the Gumblar malware came storming back into prominence at the turn of the decade, performing what Softpedia calls a "mass injection attack" on computers and websites around the world.
|