RootSmart malware utilizes GingerBreak root exploit - Revision history

Eric.freyssinet: Text replacement - "/ www." to "/ |Site=www."

2015-07-31T10:58:28Z

Text replacement - "/ www." to "/ |Site=www."

← Older revision		Revision as of 10:58, 31 July 2015
Line 5:		Line 5:
	\|Licence=		\|Licence=
	\|Video=		\|Video=
	\|Link=http://www.csc.ncsu.edu/faculty/jiang/RootSmart/ www.csc.ncsu.edu		\|Link=http://www.csc.ncsu.edu/faculty/jiang/RootSmart/
			\|Site=www.csc.ncsu.edu
	\|Author=Xuxian Jiang,		\|Author=Xuxian Jiang,
	\|NomRevue=Security Alert, Department of Computer Science		\|NomRevue=Security Alert, Department of Computer Science

Eric.freyssinet: 1 revision imported

2015-02-07T14:22:46Z

1 revision imported

← Older revision		Revision as of 14:22, 7 February 2015
(No difference)

Eric.freyssinet at 16:56, 4 February 2012

2012-02-04T16:56:24Z

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://www.csc.ncsu.edu/faculty/jiang/RootSmart/ www.csc.ncsu.edu
|Author=Xuxian Jiang,
|NomRevue=Security Alert, Department of Computer Science
|Date=3 février 2012
|Editor=CS State University
|Year=2012
|Page=
|Abstract=Different from GingerMaster, this new malware does not directly embed the root exploit inside the app. Instead, it dynamically fetchs the GingerBreak root exploit from a remote server and then executes it to escalate its privilege. Such attack is reminiscent of an earlier proof-of-concept app called RootStrap that was written by Jon Oberheide to demonstrate such capability. But RootSmart seriously substantiates this threat as the first such malware in the wild. It also reminds the earlier Plankton spyware. But Plankton does not contain any root exploit.
|Botnet=,
|Malware=RootSmart,
|CCProtocol=,
|Operation=,
}}