Falsk Instagram-app sender kæmpe sms-regninger til Android-brugere
It-kriminelle har lavet en falsk version af den populære billeddelingsapplikation Instagram. Den falske version køber dyre sms-tjenester i det skjulte fra ofrenes Androidmobiler. Det skriver sikkerhedsvirksomheden Sophos i en pressemeddelelse.
Hvis Android-brugere henter Instagram fra tvivlsomme kilder i stedet for officielle app-butikker som Google Play, risikerer de at inficere deres smartphone med malware. Foruden at rippe ofrene med dyre sms-tjenester bliver de inficerede telefoner også en del af et botnet.
Sophos har undersøgt den falske applikation, og den indeholder af uransagelige årsager et billede en russisk mand. Med hjælp fra internettet fandt Sophos frem, at billedet stammer fra et bryllup.
Nu er manden på billedet blevet noget af en internetcelebrity i Rusland. Dog har manden umiddelbart ingen forbindelse til den falske version af Instagram.
Falsk Instagram-app infekterar Androidtelefoner
Sophos identifies picture of mystery man contained inside smartphone malware
IT security and data protection company Sophos is warning Android users about malware being distributed disguised as the popular photo-sharing app Instagram. Cybercriminals have created fake versions of the Instagram Android app, designed to earn money from unsuspecting users.
Cybercriminals have played on the popularity of the Instagram app - which has millions of users around the world, and was recently acquired by Facebook for a staggering $1 billion.
If Android owners download the app from unapproved sources, rather than official sites such as the official Google Play Android marketplace, they run the risk of infecting their smartphone. Once installed, the app will send background SMS messages to premium rate services earning its creators revenue. Sophos products detect the malware, which has been distributed on a Russian website purporting to be an official Instagram site, as Andr/Boxer-F.
"Android malware is becoming a bigger and bigger problem," said Graham Cluley, senior technology consultant at Sophos. "Just last week, we saw a bogus edition of the Angry Birds Space game and it's quite likely that whoever is behind this latest malware are also using the names and images of other popular smartphone apps as bait. Infected Androids are now effectively part of a botnet, under the control of malicious hackers. Android users need to be extremely careful when downloading applications from sites, especially when they're not official Android markets."
Curiously, the malware contains a random number of identical photos of a man.
"With help from internet users we were able to identify that the image comes from a Moscow wedding photograph, where he was dressed a lot more casually than other guests," said Cluley. "The man's photo became widespread on Russian internet forums, making the man something of a celebrity. There's no reason to believe, however, that he has anything to do with the Android malware attack."
More information, including images, can be found on the Sophos Naked Security website: http://nakedsecurity.sophos.com/2012/04/18/fake-instagram-app-android-malwar/
Kommentarer (2)
Først og fremmest:
Hvem i alverden installerer software fra andre steder end Google/Apple APP store til deres android/iOS smartphone? Så er man sq da selv uden om det.
Det er jo ikke ligefrem svært at lægge noget op i app store; Apple gør det lidt mere besværligt, men det er stadig nemt. Jeg har selv en App ude og jeg kan garantere at det er nemt.
Sagt med andre ord: Hvis ikke udbyder er seriøs nok til at bruge app store som grænseflade til udbredelse, så er den pågældende app ikke det værd eller også skal den bruges til noget ulovligt.
Lidt ligesom kontanter vs betalingskort efterhånden :)
-
2 -
2
"Sagt med andre ord: Hvis ikke udbyder er seriøs nok til at bruge app store som grænseflade til udbredelse, så er den pågældende app ikke det værd eller også skal den bruges til noget ulovligt."
Preview af den nye Spotify app skal da hentes udenom Google Play, så helt sort/hvidt er det nu ikke...
-
1
-
2
Tilføj kommentar
