Go homepage(回首页) Upload pictures (上传图片) Write articles (发文字帖)
The author:(作者)aaapublished in(发表于) 2014/9/8 11:51:19 CCTV： “form on the WPS“ Android viruses to steal your privacy， kingsoft： lay down guns，
CCTV: "form on the WPS" Android viruses to steal your privacy, kingsoft: lying gun-WPS form virus, WPS, Android virus-IT newsCCTV: "form on the WPS" Android viruses to steal your privacy, kingsoft: lay down guns
"Studio"
Together to build a better quality of life, and welcome to the weekly quality report. Until June 2014, the scale of China's Internet users has reached 632 million, mobile Internet is already reached 527 million; and the proportion of Internet users use the mobile Internet for the first time exceeded the proportion of used computer, smart phones has become the largest Internet channel. However, on like we program repeatedly reported had of as, with phone mobile network of development, phone Internet of security problem also in constantly deteriorated, recently has a new of phone spy software appeared in user of phone among, after expert monitoring and analysis found, this spy software concealment strong, and destructive big, so this spy software what will brings which against does? view reporter of survey.
"The body"
Just recently, a mobile security research institutes in Beijing found during monitoring, a handset icon for WPS diagram software exception, mobile security engineers will this file after you install and activate the chart, only to discover that the icon files in the phone's pages suddenly disappeared. However, after technical analysis, cell phone safety engineers discovered that the software that does not appear on the page, but continues to run in the background, but more serious is that this software has also been interacting with two 163 mailbox data. Engineer in the intercept and open the two mailbox, which let them was taken aback.
"Sidebar" cell phone safety engineer Cheng Xianwei
This is the contact information of all the victims mobile phones.
Reporter: how much can it?
There are many, this is the message.
Reporters saw the mailbox store is a mobile phone in the contact name and phone information, and detailed messages, including bank accounts, Taobao most private personal information such as account number and password. After a simple statistical reporter found only on August 6 and 7th days on more than 30 films mobile phone upload of information to both the mailbox, every cell phone in the contact name and phone number are more than 100, up to a maximum of more than more than 260.
Reporters learned that the main victims have been reported in, then a victim contacted the owner. According to the mobile phone users, usually on his cell phone software download has been more careful, but he recently received a very familiar with WPS form download links from business partners, the unsuspecting downloading. The mobile phone users also told reporters that this careless download and install, has created in his circle of friends was a lot of shock and loss.
"Sidebar" mobile phone users
(Address book) after stolen, (viruses) have sent out to people in my address book for all such information.
Reporter: no victims of situations?
Have a friend, there are losses.
Reporter: what happened to him?
When he opened the mobile Bank know, dynamic and mobile phone banking number (leaked).
Reporter: mobile banking dynamic code?
Mobile banking to transfer money directly to go.
Reporter: how much should go?
Around 20,000 yuan.
Reporter: mobile banking account numbers and passwords, right?
Yes, after the Bank found, give him a call, and later he found that, because he was on the phone to see the (hint text), the Bank's short message, (viruses) blocked.
Analysis of cell phone safety engineers believe, the WPS forms after a virus sent to mobile phones in and immediately stole the phone's contact information and message content. Then WPS form virus and generate a download link, sent to each contact in the phone contacts; the owner's friends receive a link to download this software, Mobile bank account passwords stolen and verify dynamic code from your SMS and eventually led more than 20,000 yuan in deposits the bank card was stolen.
Aggrieved owners to disclose, on his cell phone shortly after sending the download links automatically, because a friend called to ask, he realized that his cell phone could be a virus to steal private information, then he immediately reported and refresh mobile phone systems.
Cell phone safety engineer, told reporters that WPS forms very strong viruses disguise, whose icon is normal for the Office document form, and once installed click on the mobile phone contacts and messages in the mailbox specified information will be immediately uploaded to the hacker. In order to more directly showing the dangers of the virus software, mobile phone security engineers found the virus samples and make a presentation.
This is my message, my phone all the messages, and contact information.
Reporter: in your phone's contacts, is it?
Pair.
Reporter: 1, 2, 3, 4, 5.
Click on WPS table icon in mobile security engineer at the same time, reporters saw his mailbox in specifies the send, receive two email message immediately. The reporters found that the email, mobile phone text messages of safety engineers content, respectively, and contact information. More than 20 pieces of text messages and several contact names appear exactly in the mail.
Mobile phone security engineer, WPS form another horrible because of the virus, it can not only get the latest SMS and contacts information, but also to intercept mobile phone users receive tips for text messaging. Prompt message sent to users so that banks and other financial institutions, and other important information, there may be blocked by the virus software, criminals can be made of this information without the user's knowledge of the case, steal the user's money in the bank card.
A small virus apparently regular WPS form, with its highly effective camouflage, avoid killing and the rapid spread of property, stealing thousands of mobile phone users within a short time contacts and SMS messages, loss of Bank funds and caused the aggrieved owner.
Since 2004, mobile spy viruses began to increase gradually, and with the rapid adoption of smartphones and mobile Internet, cell phone spy software continues to evolve, now that spyware has increasingly lurking among the Smartphones and ever-present threat to privacy and property.
Reporters found that in addition to steal private information such as static text messages, address book, the destructive power of cell phone spy software now becoming larger and larger, some spyware even have been able to intercept phone calls between users.
A mobile security research institutes in Beijing, mobile phone safety engineers detected a domain name is "TWT007", disguised into an Android file icon tapping cell phone spy software once it has been installed on your cell phone, cell phone users voice calls, also becomes the spy software "in the bag".
Mobile phone security engineers with less "TWT007" spyware samples is shown to reporters.
"Sidebar" cell phone safety engineer Peng Dawei
This is a new installation of the APP.
Reporter: what do you call it?
Called Ann Zhuo system, then we click, started this program, then on see, it will to applications a equipment management device of such a permission, and let we activated equipment management device of permission, this equipment management device General is block normal of this application uninstall, we points activated, then we see about, on find not to this application has, this application on hidden has. So the average user is no way to uninstall this application.
Hidden in the phone's "TWT007" spyware can steal cell phones which of information? in order to verify the destruction of spyware of features, mobile phone safety engineer then dialed a query phone 10086.
"Sidebar" 10086 customer service staff
I'm sorry, but your SIM card account has expired, entered a period of recharge, please recharge.
Subsequently, the mobile phone security engineers to open mobile phone memory card, found a recording file.
Record file is already here, you can see that we had just 17 dots 50 this recording, we can open it and see it.
"Recording software"
Reporters saw the mobile phone voice calls for safety engineers, have been made into audio files secretly stored in the mobile nameless folder. While the hacker via the Telnet Server listening sound files sent to the server. It can be said that once "TWT007" spyware sneak target phone has become a hacker-controlled tap, cell phone users have no secrets at all.
Reporters saw "TWT007" spyware stealing voice call information at the same time, cell phone, text message and send time, geographical location and other information are also stored in secret, waiting to send to the server-side, resulting in privacy.
It of information and was dump to another APP such of a application inside, or it of data district inside, so this is a exception of things, another is we can see, I dial out phone such of a all of calls information has was recording has, store in SD card above, normal phone does not provides such of a recording such of a things, is I normal of phone, so should is does not was records down of, only third party software only will to do such of things, and we see has , The whole process is also secretly recorded calls me to record.
Journalists in the survey found that current cell phone location tracking software also abound. In the app store, enter "positioning" keywords can often be found dozens of related software. These software to obtain the positions on behalf of children, the elderly, and provides location tracking service. While accompanying mobile phone security testing engineers showed that, after the software is uninstalled, location-tracking features are made available. That is, if the software installed by malicious, the target computer even if we find and uninstall the software, phone software will be exposing location information.
"Sidebar" mobile security expert Kan Zhigang
As far as I know, most of this kind of spyware will be wrapped in a cloak of such, isn't it, and that is used for other purposes.
In survey in the we found, now of phone spy software, concealment increasingly strong has, has many spy software once security activated zhihou, on in phone page Shang disappeared has, general user fundamental on not knows this paragraph spy software is himself of phone in the work; and this class software of function also increasingly powerful has, contacts, and SMS, and calls content, almost phone in the all of important information are may was these spy software monitoring has, and we of privacy on such no retained of exposed in outlaws of before, This spyware is really scary. Then, in the face of such a powerful spy software, we regular mobile phone users exactly how to prevent it?
In recent years, the rapid development of smartphones, has also brought unprecedented development boom of mobile software, which is surging undercurrent of spyware. For more than 10 years, SMS, cell phone undercover theft, address book, ghosts and other spyware or Trojans and viruses, to cell phone users maximum privacy and property damage. Is not to be ignored, hidden heavy cell phone spy software momentum grew stronger.
This spy software's growth rate is very high, according to the incomplete statistics we should be 3 to 4 times every year to increase the speed.
Reporter survey found, and past of phone spy software different of is, now of phone spy class Trojans virus has not simple of virus, more to is to phone application software form appeared, often camouflage into game, and Office, and operating system, software, once was click activated, immediately stealth Yu phone among, waiting steal SMS, and steal contacts, and manipulation phone camera, and recording calls records, serious threat phone user privacy and the property security. Camouflage, camouflage, it is difficult to uninstall, become common features of cell phone spy software. Cell phone safety engineer shows how to find and uninstall the spyware programs.
We clicked on settings, and then locate the application management, and then can be downloaded (file) monitoring software is found, click, and then click Uninstall, OK, so you can reach the unloading.
The reporters found that the burdensome to find and uninstall the software program, most cell phone users is difficult to master. And a large number of mobile spy software is activated immediately after the stealth characteristics of paralyzed mobile phone users realize the purpose of not being unloaded.
Mobile security expert told reporters that the past by strangers, SMS, MMS, Bluetooth and other means of communication between different cell phone spy software now more of a Smartphone for update feature, push updates information in install.
We look at the applications, is actually very easy to do some system updates or system updates are applied this method to trick users into downloading an update, and so on, can be implanted into the phone.
This reporter has learned that many spyware or can be automatically generated through the link, sent to poison all of the contacts in your phone contacts, inducing installation.
Mobile security experts, no less than tens of thousands of large and small cell phone spy software, plus the number of variant viruses are more difficult to count, the growing smart-phone users will undoubtedly make a huge privacy threat. Cell phone spy software characteristics of low-cost and rapid updating, it also brings great prevention problem.
Security software does it forever is lag Yu this spy software of, because in software level Shang, it as long as modified about, as long as modified has line code, has may you of Avira software on have update upgrade, has may a two days time on passed, (spy software) in this a two days the dry of things has dry finished, right, so said from against of angle,, also hopes some new of security technology appeared.
Mobile security expert told reporters that despite the rapid development of cell phone spy software, cell phone users can still download through the official channels, avoid strange links, verifying acquaintance links SMS, unusual method against cell phone spy software be uninstalled now.
According to recently released statistics show that over 90% of Android users are used to store the privacy in smart phones, Smartphones have become the carrier of carrying people up at the same time, nearly half of the Android users have never used a mobile phone security software of "privacy," and so on. So, we called on related departments to strengthen supervision on cell phone spy software at the same time, would like to remind mobile phone users, to strengthen awareness of these spyware, software through formal channels for downloads as much as possible on the one hand, on the other hand security software installed on the phone as much as possible, and learn to use this software to better protect their privacy. Well, thanks for watching the weekly quality report, see you next week at the same time.
IT news Kingsoft's official statement is as follows:
赞