Trojan uses LiveCD for Android running on x86 platforms as bait
June 2010
IT in Manufacturing
With the growing interest in testing the new Android OS on x86 platforms, cybercriminals are looking to exploit vulnerable users wanting to install the operating system on their PCs. A piece of malware is hosted by a fake webpage, imitating the original Android LiveCD one, and offering the 'hunted' software.
In essence, Google Android is a Linux kernel-based operating system for mobile phones. The statistics published on different Android-related sites and mobile advertising networks reflect its success worldwide:
* About 60 000 Android phones are sold daily and about 22 000 000 a year.
* Android Market delivers over 30 000 Android Apps.
* About 60% of Android Apps are free.
* 167 Apps have been downloaded between between 667 000 and 2,9 million times.
* The average paid Android app is priced at $3,27.
Android-powered Netbooks have recently appeared on the market, meaning that Android OS can now be installed on Netbooks and, of course, on normal PCs. A quick search on the Internet for 'Android on PC' and, here it is: a long list of sites offering the possibility to test the new OS on x86 Windows platforms.
Figure 1. Results for 'Andoid on PC' Internet search
An apparently unsuspicious link in the returned list of results, one click, and the user is redirected to a look-alike of the LiveAndroid page, which, instead of the promised OS for PCs, delivers a Trojan.
Figure 2. Trojan instead of Android OS
Identified by BitDefender as Trojan.Generic.KD.13718, this piece of malware affects only Windows platforms and contains malicious or potentially unwanted software which it drops and installs on the system. Frequently, it installs a backdoor which allows remote, clandestine access to the infected system. This backdoor may then be used by cybercriminals to upload and install additional malicious or potentially unwanted software on the captured system.
A closer look at the fallacious site and at the downloaded file reveals several differences, the most important of which being that the downloaded file should have an .iso image, not an .exe extension. The sites may look the same, but there are a few minor details that will set the bogus apart from the genuine one (as indicated in the screenshots below):
Figure 3. Original Live Android site vs. Fake Live Android site
In order to stay safe, BitDefender recommends you to install and update a complete antimalware software solution on your system.
Other details about this malware alert:
For more information contact: Alina Anton, senior PR and marketing coordinator, EMEA & APAC Business Unit, BitDefender, +40 212 063 470, [email protected], www.bitdefender.com
Further reading:
Sustainable energy management
Siemens South Africa
IT in Manufacturing
Utilising its innovative ONE approach technology, Siemens provides complete transparency on resource consumption and offers data-driven optimisation recommendations for sustainable energy management.
Read more...
Paving the way for a carbon-neutral future in South Africa
IT in Manufacturing
At ABB Electrification, we believe the infrastructure of the future must do more than support daily operations, it must anticipate them. We are committed to building intelligent systems that connect and optimise infrastructure across sectors.
Read more...
Africa’s hidden AI advantage
IT in Manufacturing
Through my work implementing AI systems across three continents, I’ve become convinced that Africa’s unique context demands urgent AI adoption. Successful implementation requires local expertise to understand resource constraints as design parameters to create the innovations that make technology truly work under real-world conditions.
Read more...
Siemens Xcelerator empowers space-tech pioneer, Skyroot Aerospace
Siemens South Africa
IT in Manufacturing
Siemens Digital Industries Software has announced that Skyroot Aerospace, a leading private space launch service company in India, has adopted Polarion software from the Siemens Xcelerator portfolio to digitally transform its software development processes and enhance efficiency as it aims to accelerate access to space for its customers worldwide.
Read more...
Water is running out, is your ESG strategy ready?
IT in Manufacturing
Water is one of the most critical yet undervalued resources in modern business. Water stewardship asks businesses to understand their water footprint across the entire value chain and to engage with others who share the same water resources.
Read more...
Cybersecurity in 2025: Six trends to watch
IT in Manufacturing
Rockwell Automation’s?10th?State?of?Smart?Manufacturing report finds that cybersecurity risks are a major, ever-present obstacle, and are now the third-largest impediment to growth in the next 12?months.
Read more...
The state of the smart buildings market in 2025
IT in Manufacturing
Smart buildings are entering a transformative phase, driven by sustainability goals, technological innovation and evolving user expectations. According to ABI Research’s latest whitepaper, the sector is undergoing a strategic overhaul across key areas like retrofitting, energy efficiency, data-driven operations and smart campus development.
Read more...
Digital twin for Bavaria’s National Theatre
Siemens South Africa
IT in Manufacturing
Siemens and the Bavarian State Opera are digitalising the acoustics in Bavaria’s National Theatre in Munich, Germany. The result is a digital twin that simulates sound effects, orchestral setups and venue configurations in a realistic 3D acoustic model so that musicians, the director and conductors can assess a concert hall’s acoustics even before the first rehearsal.
Read more...
How AI can help solve South Africa’s water crisis
IT in Manufacturing
Climate change, ageing infrastructure, pollution and unequal access are putting intense pressure on the country’s water systems. A powerful question arises: “Can artificial intelligence help us change course?”
Read more...
Backup has evolved, but has your strategy?
IT in Manufacturing
With cyber threats rising and compliance standards tightening, South African organisations are under growing pressure to revisit their data protection strategies. The era of treating backups as a box-ticking exercise is over.
Read more...
printer friendly version