View source for Security alert: new variants of Legacy Native (LeNa) identified

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://blog.mylookout.com/blog/2012/04/03/security-alert-new-variants-of-legacy-native-lena-identified/ blog.mylookout.com
|Author=Tim Wyatt, 
|NomRevue=The Official Lookout Blog
|Date=APRIL 3, 2012
|Editor=Lookout
|Year=2012
|ISBN=
|Page=
|Abstract=We recently encountered an interesting new variant of our “old friend” Legacy Native (LeNa). LeNa originally masqueraded as a legitimate application and attempted to trick a user into activating its malicious payload by invoking the SU utility, which is used by “rooted” users to selectively grant superuser privileges to applications that request them. After the repackaged application gained root access, it functioned properly, but simultaneously installed a native binary file to the device granting remote control, including the ability to install additional software without any user notification. Because of its dependency on the SU utility to gain root permissions, the pool of users vulnerable to LeNA was inherently limited to those that rooted their devices – a relatively small, albeit technically adept set of users.
|Botnet=, 
|Malware=LeNa, 
|CCProtocol=, 
|Operation=, 
|Keyword=GingerBreak, 
}}