Wednesday, October 27, 2010

SMS Spoofing - A potential hacker attack

Other potential attack vector: a text message on the smartphone. Hackers can use spoof sms to contact employees of a company in a direct effort to get help easily to divulge sensitive information such as network log-in credentials and business intelligence. among others, they can also use text messages to install malware on a smartphone.
"In our proof-of-concept work, we show how to turn on the microphone, rootkits can phone without the owner knowing it happened," said Schwartau. "An attacker can send a text message will not be visible to the infected phone to make calls and talk about the microphone switch." That would be an effective tactic if, for example, the owner of the phone is close and the attacker would like to eavesdrop, he noted.
Schwartau said that there is no way to filter out SMS activity, but it is usually done through the operator, because SMS is not based on IP and is therefore usually not controlled by the admin. The best option to block the attack to work with suppliers to ensure that they are using software restriction malware, filter SMS, and divert those types of attacks.
And again, creating policies that encourage the use of smartphone or require the use of only a sentence or a company-company-provided phone and service plan to reduce that risk.
Of course, companies can not thwart any possible security attacks with current technology, and hackers continue to switch tactics. You should try to install six security breaches and to work to ensure that they are installed - but you should also go out to new forms of malicious activity.

Wednesday, October 20, 2010

Fake SMS - It can be done

Most of  people didn't  know that sms in the inbox can be made by the owner of the mobile phone, devoid of any interference of others. It is easily seen from the number of people who believe that the contents of the inbox are strong and authentic evidence that others have sent sms to him.

What if your friend says that the X has been sending text messages on her insolent tone? Maybe you do not believe it? What if you find "proof" sms from X whose contents are insolent tone? For the layman this sms is a very strong proof, indisputable that X actually has sent a sms tone of disrespectful, and therefore X should be taught a lesson.

Mobile phone is no different with computers, there is a processor, memory, storage and of course the operating system. Mobile phone operating system that mostly known are the Windows Mobile and Symbian. Inbox, sent, draft etc. are also more or less like a folder. Regular practice in mobile phone is copying / moving messages from one folder to another as from the draft sent to or from the inbox to the saved messages. There is no menu to create and store sms in the inbox. But that does not mean impossible, because the actual function or the fire in the operating system already available. Living alone made the program to do it.

Another scenario is very much social engineering, depending on each person's imagination. This is dangerous because so many people who strongly believe that the text in your INBOX is really sent by people who look at the “from” field, so easily provoked and trusting.

It should be understood that the sms can be spoofed so it is not necessarily a sms in the inbox hp really sent by people listed in the field From / Sender.