Eric.freyssinet: 1 revision imported

2015-02-07T14:22:59Z

1 revision imported

← Older revision	Revision as of 14:22, 7 February 2015
(No difference)

Eric.freyssinet: Page créée avec « {{Publication |Image= |Legend= |Document= |Licence= |Video= |Link=http://resources.infosecinstitute.com/rootsmart-android-malware/ |Author=Quequero |Auteur2= |Auteur3= ... »

2012-02-11T11:49:58Z

Page créée avec « {{Publication |Image= |Legend= |Document= |Licence= |Video= |Link=http://resources.infosecinstitute.com/rootsmart-android-malware/ |Author=Quequero |Auteur2= |Auteur3= ... »

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://resources.infosecinstitute.com/rootsmart-android-malware/
|Author=Quequero,
|NomRevue=InfoSec Institute Resources
|Date=10 février 2012
|Editor=InfoSec Institute
|Year=2012
|ISBN=
|Page=
|Abstract=Android’s increasing popularity, combined with the possibility to create alternative markets, makes this platform a fertile ground for malware authors. While most of these applications just exploit the inexperience of the average user that is looking for free software, others are pretty smart and use more sophisticated techniques to take, and keep, control of the infected devices.<br/>

Lately it came to my attention that a new malware was taking advantage of the famous [[GingerBreak]] exploit to gain root privileges on infected phones. RootSmart, the name given to the malware by the people who identified it first, is the second application found in the wild making use of an exploit (the first one was [[GingerMaster]] detected back in August 2011).<br/>

[[RootSmart]] is actually, well… smart, kind of. The exploit is not embedded into the package, probably in an attempt to appear less suspicious to the AV systems, but is downloaded from a remote webserver alongside other malicious packages. Additionally, a bit of cryptography is used to deter the analyst from reverse engineering the application.
|Botnet=,
|Malware=RootSmart,
|CCProtocol=,
|Operation=,
}}

RootSmart Android malware - Revision history

Eric.freyssinet: 1 revision imported

Eric.freyssinet: Page créée avec « {{Publication |Image= |Legend= |Document= |Licence= |Video= |Link=http://resources.infosecinstitute.com/rootsmart-android-malware/ |Author=Quequero |Auteur2= |Auteur3= ... »