본문 바로가기

Security_News/국내보안소식

홈페이지 통한 악성앱 유포. 파일명 MyAndroid.apk

728x90

<긴급> 홈페이지 통한 악성앱 유포.
스마트폰 대상 사용자이며 파일명은 MyAndroid.apk 입니다.
http://dropbox.com 에 악성앱을 올려 놨네요
주의 바랍니다. 국내 백신은 탐지 못하는 상황입니다.

주요 탈취되는 정보들은 다음과 같습니다.

android.permission.CHANGE_NETWORK_STATE (change network connectivity)
android.permission.VIBRATE (control vibrator)

android.permission.RECEIVE_BOOT_COMPLETED (automatically start at boot)
android.permission.WRITE_SETTINGS (modify global system settings)
android.permission.READ_PHONE_STATE (read phone state and identity)
android.permission.SEND_SMS (send SMS messages)
android.permission.WRITE_SMS (edit SMS or MMS)
android.permission.ACCESS_NETWORK_STATE (view network status)
android.permission.PROCESS_OUTGOING_CALLS (intercept outgoing calls)
android.permission.WRITE_CALL_LOG (write (but not read) the user's contacts data.)
android.permission.GET_TASKS (retrieve running applications)
android.permission.CALL_PHONE (directly call phone numbers)
android.permission.CHANGE_WIFI_STATE (change Wi-Fi status)
android.permission.RECEIVE_SMS (receive SMS)
android.permission.READ_CONTACTS (read contact data)
android.permission.MOUNT_UNMOUNT_FILESYSTEMS (mount and unmount file systems)
android.permission.INTERNET (full Internet access)
android.permission.READ_SMS (read SMS or MMS)
android.permission.WRITE_EXTERNAL_STORAGE (modify/delete SD card contents)
android.permission.READ_CALL_LOG (read the user's call log.)


C&C 126.***.***.***      일본 

728x90