Android.Bmaster: A million-dollar mobile botnet - Revision history

Eric.freyssinet at 14:11, 8 August 2015

2015-08-08T14:11:41Z

← Older revision		Revision as of 14:11, 8 August 2015
Line 5:		Line 5:
	\|Operation=,		\|Operation=,
	\|Year=2012		\|Year=2012
	\|Date=~~9 feb~~ 2012		\|Date=2012 02 09
	\|Editor=Symantec		\|Editor=Symantec
	\|Link=http://www.symantec.com/connect/blogs/androidbmaster-million-dollar-mobile-botnet		\|Link=http://www.symantec.com/connect/blogs/androidbmaster-million-dollar-mobile-botnet

Eric.freyssinet at 14:11, 8 August 2015

2015-08-08T14:11:17Z

@@ Line 1: / Line 1: @@
 {{Publication
-|Image=
+|Botnet=Bmaster,
-|Legend=
+|Malware=RootSmart,
 |Document=
 |Licence=
 |Video=
 |NomRevue=Symantec Connect Community
 |Page=
 }}

Eric.freyssinet: Text replacement - " www.symantec.com" to ""

2015-08-05T19:50:25Z

Text replacement - " www.symantec.com" to ""

← Older revision		Revision as of 19:50, 5 August 2015
Line 5:		Line 5:
	\|Licence=		\|Licence=
	\|Video=		\|Video=
	\|Link=http://www.symantec.com/connect/blogs/androidbmaster-million-dollar-mobile-botnet ~~www.symantec.com~~		\|Link=http://www.symantec.com/connect/blogs/androidbmaster-million-dollar-mobile-botnet
	\|Author=Cathal Mullaney,		\|Author=Cathal Mullaney,
	\|NomRevue=Symantec Connect Community		\|NomRevue=Symantec Connect Community

Eric.freyssinet: 1 revision imported

2015-02-07T14:22:57Z

1 revision imported

← Older revision	Revision as of 14:22, 7 February 2015
(No difference)

Eric.freyssinet at 10:51, 11 February 2012

2012-02-11T10:51:49Z

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://www.symantec.com/connect/blogs/androidbmaster-million-dollar-mobile-botnet www.symantec.com
|Author=Cathal Mullaney,
|NomRevue=Symantec Connect Community
|Date=9 février 2012
|Editor=Symantec
|Year=2012
|Page=
|Abstract=We recently came across a new piece of Android malware, first highlighted by NC State’s [[Xuxian Jiang]], and began investigating the command-and-control (C&C) servers associated with the threat. The malware was discovered on a third party marketplace (not the Android Market) and is bundled with a legitimate application for configuring phone settings. Trojanized applications are a well known infection vector for Android malware, as they allow malware to be distributed while retaining the appearance of a legitimate application.
Analysis of these servers indicate the total number of infected devices connected to the botnet over its entire life span numbered in the hundreds of thousands. The number of infected devices on a given day able to generate revenue was 10,000 to 30,000 on average, enough to potentially net the botmaster millions of dollars annually if infection rates are sustained. Profit estimations can be found in the "Revenue generation" section below. So far, the botmaster has been operating at these rates since September 2011. The botnet targets mobile users in China (the Trojanized application is only available for download from third-party Chinese markets). Revenue generation through premium SMS, telephony, and video services is also limited to the networks of China's two largest mobile carriers. Since the botnet has been active for a considerable amount of time, the botmaster has already earned hundreds of thousands of potential dollars during its operation. Also, while this is not the first botnet of this type we have found, this is the first time we are revealing detailed information regarding profitable revenue generation.
|Botnet=Android.Bmaster,
|Malware=RootSmart,
|CCProtocol=,
|Operation=,
}}