DroidLive New SMS Android Trojan - Revision history

Eric.freyssinet: Text replacement - "/ www." to "/ |Site=www."

2015-07-31T11:10:43Z

Text replacement - "/ www." to "/ |Site=www."

← Older revision		Revision as of 11:10, 31 July 2015
Line 5:		Line 5:
	\|Licence=		\|Licence=
	\|Video=		\|Video=
	\|Link=http://www.csc.ncsu.edu/faculty/jiang/DroidLive/ www.csc.ncsu.edu		\|Link=http://www.csc.ncsu.edu/faculty/jiang/DroidLive/
			\|Site=www.csc.ncsu.edu
	\|Author=Xuxian Jiang,		\|Author=Xuxian Jiang,
	\|NomRevue=Security Alert, Department of Computer Science		\|NomRevue=Security Alert, Department of Computer Science

Eric.freyssinet: 1 revision imported

2015-02-07T14:22:45Z

1 revision imported

← Older revision		Revision as of 14:22, 7 February 2015
(No difference)

Eric.freyssinet at 10:59, 4 February 2012

2012-02-04T10:59:54Z

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://www.csc.ncsu.edu/faculty/jiang/DroidLive/ www.csc.ncsu.edu
|Author=Xuxian Jiang,
|NomRevue=Security Alert, Department of Computer Science
|Date=11 novembre 2011
|Editor=CS State University
|Year=2011
|Page=
|Abstract=My research group, in collaboration with NQ Mobile, recently uncovered another SMS Trojan named -- DroidLive -- in third-party Android markets. The malware attempts to disguise itself as a Google library, but actually receives commands from a remote Command and Control (C&C) server, which allow it to engage in sending text messages to premium numbers, making phone calls, collecting personal information, and other nefarious activities. Also, one unusual behavior of this malware is its attempt of installing itself as a device administration app. Though this requires user consent, if such consent is given, DroidLive can obtain privileges closer to those granted only to the device's firmware. To the best of our knowledge, this is the first malware that takes advantage of the device administration API.
|Botnet=,
|Malware=DroidLive,
|CCProtocol=,
|Operation=,
}}