Upload File

three steps to combat mobile malware

14
Three Steps To Combat Mobile Malware Sajal Sahay Senior Director Product Marketing, Mobilisafe

Upload: rapid7

Post on 15-Jun-2015

120 views

Category:

Technology


0 download

Report

Tags:

DESCRIPTION

As mobile devices become more common, cybercriminals see them as having huge profit potential, and aim to gain access to a users confidential personal and financial information. Mobile applications are the primary way users access information via mobile devices, and as a result the majority of mobile malware is embedded in applications that once downloaded on the device can gain access to this valuable information. But creating policies and understanding the risk of mobile malware, can often be easier said than done. Join Saj Sahay, Senior Product Marketing Director at Rapid7 for an interactive webcast where Saj discusses the mobile malware landscape and how organizations can limit their risk. To download a free Mobilsafe demo, click here: http://information.rapid7.com/mobilisafe-demo.html?LS=1428723&CS=Web

TRANSCRIPT

Page 1: Three Steps to Combat Mobile Malware

Three Steps To Combat

Mobile Malware

Sajal Sahay

Senior Director Product Marketing, Mobilisafe

Page 2: Three Steps to Combat Mobile Malware

2

Saj Sahay Sr. Director of Product Marketing,

Rapid7

Presenters

Page 3: Three Steps to Combat Mobile Malware

Short for “Malicious Software”, there are

multiple types of malware

• Software that can disrupt device operations, gather

sensitive information or gain undue access to the

device

BYOD explosion is the malware growth story

• Attackers adapting and quickly moving to mobile

• Mostly embedded in apps as they are the primary way

users access information on mobile devices

What Is Malware?

3

Page 4: Three Steps to Combat Mobile Malware

Key Types Of Mobile Malware

4

Trojans

• Once installed provide access to the device for the

person who originated the program

• Usually in untrustworthy applications in 3rd party app

stores

• Can exfiltrate information and lead to significant

financial and organizational harm

RootKits

• Activate every time your system boots up

• Can be very difficult to detect

• Can allow the installation of hidden files, hidden

user accounts etc.

Page 5: Three Steps to Combat Mobile Malware

Why Is Mobile Malware Growing?

5

Cybercriminals see a rich target given that mobile devices usually have a lot

of personal & financial information on them

Spam/Phishing was very successful on desktops, and attackers feel that end

users are susceptible to the same failings on mobile devices

Most popular apps are from lesser known companies so it’s difficult for

consumers to know which ones to trust

Page 6: Three Steps to Combat Mobile Malware

The Growth Is Astounding!*

6

123% growth in malware discoveries in ’12

vs. ‘11

95% of infections on Android given diversity

of OS versions still being used

Common ways to exploit the OS were

through application repackaging, malicious

URLs & SMS phishing

Total of 32.8 million Android devices

infected in ‘12, a 200% growth from ’11 * From NQ Mobile’s Yr 2012 Mobile Security Report

Page 7: Three Steps to Combat Mobile Malware

So, What Can You Do?

7

Every company should have

written mobile usage policies for

their employees!

• Make sure they are easy to understand

• Make sure that all employees go through

the necessary training for successful

company-wide implementation

Include the following three

malware focused policies in your

company’s written document

Page 8: Three Steps to Combat Mobile Malware

Malware Focused Policy #1 Employees Should Only Download Applications From Trusted Sources

8

Google Play (Android) and the iOS App

Store (iOS) are administered by Google &

Apple

• Strict requirements for applications submitted for

inclusion

• Utilize sophisticated filtering mechanisms to discover

and remove apps that may contain malware

Apps should not be downloaded from

untrustworthy 3rd party app stores

Page 9: Three Steps to Combat Mobile Malware

9

Malware Focused Policy #2 Employees Should Always Update Their Mobile Devices To The Latest Firmware

Extend the same patch requirements

for your corporate network to mobile

Updating firmware is the best way to

patch vulnerabilities on mobile

devices

Page 10: Three Steps to Combat Mobile Malware

10

Mobile Malware Example: DroidKungFu

This type of malware can be

considered both a Trojan and a

Rootkit

• Unique because it can avoid detection by anti

malware software

• Works by installing a backdoor in the Android

OS

• Gives the attacker full control of the user’s

mobile device

• Mainly affects devices running Android 2.2,

exploiting two vulnerabilities in the OS version

Page 11: Three Steps to Combat Mobile Malware

Malware Focused Policy #3 Employees Shouldn’t Click Unfamiliar Links Sent Via SMS Or E-mail

11

Employees should be very careful

when receiving an SMS or email

containing a link

If the URL of the link seems

suspicious they should not click

the link

Inform the Security Department

instead to investigate the URL

Page 12: Three Steps to Combat Mobile Malware

Mobile Malware Example: Zitmo (Zeus in the Mobile)

12

A Trojan that can forward SMS’s with

confidential information from the

device to other phone numbers

• Can steal a user’s username and password

• A SMS is sent with a link to update the ‘security

certificate’, while it actually directs the user to

install Zitmo

• Once the installation is completed and info is

received, attackers usually log-into user’s

confidential sites like bank accounts to initiate

unauthorized transactions

Page 13: Three Steps to Combat Mobile Malware

1. Employees Should Only Download Applications From Trusted Sources

2. Employees Should Always Update Their Mobile Devices To The Latest

Firmware

3. Employees Shouldn’t Click Unfamiliar Links Sent Via SMS Or E-mail

13

Summary - Three Steps To Combat Mobile Malware

Page 14: Three Steps to Combat Mobile Malware

Try Moblisafe for yourself - http://information.rapid7.com/mobilisafe-

demo.html

14

Thank you!

http://information.rapid7.com/mobilisafe-demo.html
http://information.rapid7.com/mobilisafe-demo.html
http://information.rapid7.com/mobilisafe-demo.html
http://information.rapid7.com/mobilisafe-demo.html

Reversing malware analysis trainingpart9 advanced malware analysis

June 2013 Univ. of Alabama @ Birmingham1 Research of Alan Sprague: Using Data Mining to Combat Spam, Phishing, and Malware Department of Computer and Information

Combat Air Strategy progress and next steps · 2019-06-25 · own Future Combat Air System (FCAS)/ Système de Combat Aérien Futur (SCAF) programme. French President Emmanuel Macron

Taking steps to combat barriers to ethnic minority …[email protected] Taking steps to combat barriers to ethnic minority enterprise in Scotland Report by: Dr Samuel Mwaura

Computer Virology and Mobile Malware Detection · 2019-03-14 · Outline •Introduction •Computer Virology • Malware taxonomy • Encrypted malware •Malware Detection •Mobile

Chapter 8 Malware - FTMS · – Boot virus – Logic Bomb virus – Directory virus – Resident virus. CSCA0101 Computing Basics 8 Malware Types of Malware ... Malware Types of Malware

Combat Arms Combat Support Combat Service Support

Improving accuracy of malware detection by …...FFRI, Inc. Background – malware and its detection 4 Increasing malware Targeted Attack (Unknown malware) Malware generators Obfuscators

RE V I S I O N: 4 · Active steps represent combat-ready troops. They contribute to both attack and defense, and are first in line to take losses in combat. Suppressed steps take

Malware Nilgün Kablan. Malware …………………………………….…….……………………………………………… Geschichte der Malware ……………….…………………………………………………

Welcome to Sales Combat Welcome to Sales Attack Welcome to Sales STEPs Welcome to Sales Flow

Intrusion Detection and Malware Analysis - Malware collection

Ch 12: Covert Malware Launching - samsclass.info · Practical Malware Analysis Ch 12: Covert Malware Launching Last revised: 4-10-17. Hiding Malware • Malware used to be visible

Malware Analysis Analysis.pdf · Definisi Malware Analysis • What is a malware? • Malware (malicious software) ... Malware Sinkronisasi Token • Pelaku: Zeus Banking Trojan •

The Text Book of Close Combat - ebook - Rage University FIGHTING AND WEA… · 1 THE TEXT BOOK OF CLOSE COMBAT Chapter’s 1 and 2 First Steps in Offensive and Defensive Close Combat

Board Ready Endpoint Resilience in 5 Steps€¦ · Board Ready Endpoint Resilience in 5 Steps When a successful attack occurs, it happens fast. Automated malware can wreak havoc within

Malware Fails Best Bugs in Malware Felix Leder [Malware ... · 1 Malware Fails Best Bugs in Malware Felix Leder [Malware Detection Team] [email protected] 5. desember 2011 malware

Combat Margin Erosion in Five Steps - LogiSYM · 2019-11-01 · COMBAT MARGIN EROSION IN FIVE STEPS Pg 20 by Ingo Kloepper OCTOBER 2019 The Official Journal of The Logistics & Supply

Malware & Anti-Malware

Malware Slums: Measurement and Analysis of Malware on ...homepage.cs.uiowa.edu/~mshafiq/files/malware... · Malware Slums: Measurement and Analysis of Malware on Traffic Exchanges

An Introduction To Keyloggers, RATS And Malware€¦ · Malware Malware has been a problem for ages, Malware is short form of malicious software. A Malware is basically a program

Intrusion Detection and Malware Analysis - Malware collection134.2.173.140/lehre/ws10/ids-malware/12-malware-collection.pdf · Intrusion Detection and Malware Analysis Malware collection

Malware Protection Windows 8 - Rohde & Schwarz · 1EB01_ Rohde & Schwarz Malware Protection Windows 8 5 1.2 General considerations The steps described above help to guarantee that

Analisis dan Deteksi Malware Menggunakan Metode Malware

THE TEXT BOOK OF CLOSE COMBAT - The Ultimate … TEXT BOOK OF CLOSE COMBAT.pdf · 2 THE TEXT BOOK OF CLOSE COMBAT CHAPTER's 1 and 2 First Steps in Offensive and Defensive Close Combat

An EU Strategy to Combat Homelessness: Next Steps

Steps to combat antibiotic resistance

Introduction to Mobile Malware. Outline ➢ Introduction ➢ Types of Malware ➢ Malware examples ➢ How Malware Spreads ➢ Prevention ➢ AndroRAT Hands-on Lab

Windows Malware Firewall: Remove Windows Malware Firewall

Malware, Malware y más Malware ¿Cómo me puedo proteger? “Dijo el cliente web”

Mobile Malware Network View - Black Hat · Mobile Malware Network View ... ... Windows Malware impacts mobile

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

Canada’s Anti Spam Legislation. What is CASL? CASL was intended to combat negative online behaviour spam phishing malware spyware It will create

5 Steps to Combat Asthama

Malware Analysis Without Looking At Assembly Codegauss.ececs.uc.edu/Courses/c5155/pdf/malware-analysis.pdf · 2015. 11. 20. · Malware Analysis Malware typically employs encryption: