Android malware – SWITCH Security-Blog

Superfish Adware and SSL backdoor preinstalled on Lenovo Laptops: In case you bought a Lenovo Laptop in the last 6 month, you should check it for preinstalled malware and – even worse – a rogue root CA certificate making the system vulnerable to HTTPS spoofing…
…CERT/CC warns in the meantime, that also other (Komodia) software installs this certificate and private keys, like for example the ‘KeepMyFamilySecure’ parental control software.
SIM card encryption keys: According to “The Intercept”, US and British intelligence services have stolen encryption keys of the major SIM card maker Gemalto to spy on mobile voice and data communications worldwide. Gemalto produces some 2 billion SIM cards a year and also makes the chips for ‘next-generation’ credit cards.
Android Malware: Newly discovered Android malware hijacks your (rooted) phones shutdown process. Even though the device appears to be off, it remains functional and the malware can make outgoing calls, take pictures and perform many other tasks.
Kaspersky published information about a threat actor that ‘surpasses anything known in terms of complexity and sophistication of techniques‘. One of their tools: Malware that allows reprogramming of the hard drive firmware of all popular brands.
Kaspersky also published their 31-page Lab Report “Financial cyber threats in 2014“
Drive-by: Anyone who has browsed Jamie Oliver’s site recently should perform a security scan to ensure their computers were not infected. 😉

German:

Die Digitale Gesellschaft Schweiz hat einen 24-seitigen Bericht zum Thema “Massenüberwachung durch die Geheimdienste: Wie ist die Schweiz betroffen, und welche Massnahmen sind notwendig?” (PDF) veröffentlicht.

The Cybercrime Coordination Unit Switzerland (CYCO/KOBIK) published their Annual Report 2012 (PDF). It’s also available in German.
Phishing: How the phishers perpetrated their attacks, and what defensive measures are and are not working: The Anti-Phishing Working Group (APWG) released the Global Phishing Survey for 2H2012.
DDoS Attacks: I’m under attack. What should I do? Whom should I call? Dave Piscitello wrote an interesting blog post about How to Report a DDoS Attack on behalf of the ICANN Security Team.
When it comes to enterprise security, is it better to focus on compliance or risk? A viewpoint from Christian Anschuetz and Dan Abdul at networkworld.com.
A new Android malware is targeting Polish e-banking users. The application is called “E-Security”. (CERT Polska)
Strong Twitter passwords are important! Here you can (let your colleagues) check, if your/their Twitter passwords are still secure. 😉