Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.mobile.android > #56214

Re: Anti-virus?

From "Carlos E. R." <robin_listas@es.invalid>
Newsgroups comp.mobile.android
Subject Re: Anti-virus?
Date 2018-10-03 15:31 +0200
Message-ID <g1julsFm4mjU1@mid.individual.net> (permalink)
References (1 earlier) <dq6a8f-nvf.ln1@hergen.dyndns.org> <potui9$t02$1@dont-email.me> <nsmb8f-bfa.ln1@hergen.dyndns.org> <g1jniaFknuvU1@mid.individual.net> <ukre8f-m02.ln1@hergen.dyndns.org>

Show all headers | View raw


On 03/10/2018 15.09, Hergen Lehmann wrote:
> Am 03.10.2018 um 13:30 schrieb Carlos E. R.:
> 
>>>> How does an Android device get infected?
>>>
>>> In most cases by installing that new, popular game which contains some
>>> kind of malware and hasn't been pulled from the store yet. Google isn't
>>> exactly fast in doing this and is rather indifferent about spyware.
>>
>> Then they would be Trojans, not virii.
> 
> Not sure about that. Malware distributed through the store does rely
> heavily on word-of-mouth propaganda to spread quickly before being
> pulled. Quite likely some will try to spread actively, either by forging
> recommendations in the store, or by sending messages to contacts found
> in the contact list.
> 
> Anyway, most AV software claims to protect against all kind of malware,
> not only virii, so it's rather pointless to try some demarcation here.

Well, I, as others, wonder about how actual virus can propagate on
Android devices.

On the other hand, I doubt how much an Antivirus can do against
"trojans", ie, software distributed through official sources that do bad
things. Can they be really faster than google, with the huge amount of
apps out there?

> 
>>> Infected media files and web sites also are a common vector of attack.
>>
>> I don't think I have seen any :-?
> 
> Well, i'm not visiting media piracy sites too much either. ;-)
> But there has been a lot of fuzz about this attack vector, especially
> when stagefright was discovered.

Ah... those media files.
I would not use Android for those - Nor Windows. :-p

> 
>>> Some devices (especially no-name china brands) do come with malware
>>> already pre-installed at the factory.
>>
>> Not virii.
> 
> Not sure about that. As this is mainly a problem with malware found on
> chinese phones and targeted at the chinese market, it is almost
> impossible to find any details on purpose and distribution channels.
> But it would be strange, if not at least some of these will try to
> actively spread, too.
> 
>>> In business environments, email attachments also pose a major risk,
>>> especially if combined with social engineering.
>>
>> Not virii
> 
> Most of these *will* be virii.

How can they spread to another phone? Sending another email? Because
that looks rather like a social engineering trojan. :-p


> After the attacker has successfully penetrated the security of a company
> or governmental institution at some point (most likely the smartphone or
> desktop PC of some simple-minded non-technical employee), his success
> heavily depends on spreading out to more important computers in the
> local area network as fast as possible.

Yes, computers, yes. But I have not seen phones using samba or opening
ports :-?

-- 
Cheers,
       Carlos E.R.

Back to comp.mobile.android | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Anti-virus? Alek <alek.trishan@gmail.com> - 2018-10-01 13:54 -0400
  Re:Anti-virus? Libor Striz <poutnik4REMOVEnntp@CAPITALSgmail.com> - 2018-10-01 20:05 +0200
    Re: Anti-virus? Alek <alek.trishan@gmail.com> - 2018-10-01 14:15 -0400
      Re: Anti-virus? Calum <com.gmail@nospam.scottishwildcat> - 2018-10-01 19:55 +0100
    Re: Anti-virus? Joerg Lorenz <hugybear@gmx.ch> - 2018-10-01 22:11 +0200
      Re: Anti-virus? Libor Striz <poutnik4REMOVEnntp@CAPITALSgmail.com> - 2018-10-02 02:14 +0200
        Re: Anti-virus? Joerg Lorenz <hugybear@gmx.ch> - 2018-10-02 06:18 +0200
      Re: Anti-virus? Libor Striz <poutnik4REMOVEnntp@CAPITALSgmail.com> - 2018-10-02 02:34 +0200
  Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-01 20:49 +0200
    Re: Anti-virus? Alek <alek.trishan@gmail.com> - 2018-10-01 16:03 -0400
      Re: Anti-virus? Arlen   H  Holder <arlenh.older@no.spam.net> - 2018-10-02 02:52 +0000
      Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-02 10:29 +0200
        Re: Anti-virus? "Carlos E. R." <robin_listas@es.invalid> - 2018-10-03 13:30 +0200
          Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-03 15:09 +0200
            Re: Anti-virus? "Carlos E. R." <robin_listas@es.invalid> - 2018-10-03 15:31 +0200
              Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-03 16:33 +0200
    Re: Anti-virus? Arlen   H  Holder <arlenh.older@no.spam.net> - 2018-10-02 02:50 +0000
      Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-02 10:55 +0200
        Re: Anti-virus? Arlen   H  Holder <arlenh.older@no.spam.net> - 2018-10-02 12:32 +0000
          Re: Anti-virus? 123456789 <12345@12345.com> - 2018-10-02 09:45 -0700
            Re: Anti-virus? Frank Slootweg <this@ddress.is.invalid> - 2018-10-02 17:54 +0000
              Re: Anti-virus? 123456789 <12345@12345.com> - 2018-10-02 13:15 -0700
                Re: Anti-virus? Arlen   H  Holder <arlenh.older@no.spam.net> - 2018-10-03 02:38 +0000
                Re: Anti-virus? Frank Slootweg <this@ddress.is.invalid> - 2018-10-03 10:49 +0000
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 12:11 +0000
                Re: Anti-virus? 123456789 <12345@12345.com> - 2018-10-03 08:42 -0700
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 16:16 +0000
                Re: Anti-virus? Frank Slootweg <this@ddress.is.invalid> - 2018-10-03 17:32 +0000
                Re: Anti-virus? Java Jive <java@evij.com.invalid> - 2018-10-03 19:02 +0100
                Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-03 20:13 +0200
                Re: Anti-virus? Frank Slootweg <this@ddress.is.invalid> - 2018-10-03 20:09 +0000
                Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-03 23:23 +0200
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-04 13:06 +0000
                Re: Anti-virus? Frank Slootweg <this@ddress.is.invalid> - 2018-10-04 15:02 +0000
                Google does *not* track *you*! (was: Anti-virus?) Frank Slootweg <this@ddress.is.invalid> - 2018-10-04 15:44 +0000
                Re: Google does *not* track *you*! 123456789 <12345@12345.com> - 2018-10-04 09:10 -0700
                Re: Google does *not* track *you*! "Carlos E.R." <robin_listas@es.invalid> - 2018-10-07 22:03 +0200
                Re: Google does *not* track *you*! 123456789 <12345@12345.com> - 2018-10-07 14:23 -0700
                Re: Google does *not* track *you*! Frank Slootweg <this@ddress.is.invalid> - 2018-10-04 17:07 +0000
                Re: Anti-virus? 123456789 <12345@12345.com> - 2018-10-04 09:10 -0700
              Re: Anti-virus? Arlen   H  Holder <arlenh.older@no.spam.net> - 2018-10-03 02:36 +0000
            Re: Anti-virus? Arlen   H  Holder <arlenh.older@no.spam.net> - 2018-10-03 02:34 +0000
              Re: Anti-virus? 123456789 <12345@12345.com> - 2018-10-02 20:33 -0700
                Re: Anti-virus?  Arlen    Holder  <a%rlenh.older@no.spam.net> - 2018-10-03 04:30 +0000
                Re: Anti-virus? 123456789 <12345@12345.com> - 2018-10-02 22:13 -0700
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 12:52 +0000
                Re: Anti-virus? "Carlos E. R." <robin_listas@es.invalid> - 2018-10-03 15:09 +0200
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 15:40 +0000
                Re: Anti-virus? 123456789 <12345@12345.com> - 2018-10-03 08:42 -0700
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 16:16 +0000
                Re: Anti-virus? 123456789 <12345@12345.com> - 2018-10-03 15:52 -0700
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 23:31 +0000
                Re: Anti-virus? 123456789 <123456@123456.com> - 2018-10-03 21:21 -0700
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-04 13:07 +0000
                Re: Anti-virus? 123456789 <12345@12345.com> - 2018-10-04 09:10 -0700
              Re: Anti-virus? "Carlos E. R." <robin_listas@es.invalid> - 2018-10-03 13:37 +0200
                Re: Anti-virus? nospam <nospam@nospam.invalid> - 2018-10-03 08:44 -0400
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 12:52 +0000
                Re: Anti-virus? "Carlos E. R." <robin_listas@es.invalid> - 2018-10-03 15:06 +0200
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 15:40 +0000
                Re: Anti-virus? "Carlos E.R." <robin_listas@es.invalid> - 2018-10-07 20:41 +0200
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-08 15:00 +0000
          Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-02 20:42 +0200
            Re: Anti-virus? "Carlos E. R." <robin_listas@es.invalid> - 2018-10-03 13:44 +0200
              Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 12:52 +0000
                Re: Anti-virus? "Carlos E. R." <robin_listas@es.invalid> - 2018-10-03 15:14 +0200
                Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-03 15:31 +0200
                Re: Anti-virus? "Carlos E. R." <robin_listas@es.invalid> - 2018-10-03 17:47 +0200
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 16:16 +0000
                Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-03 18:20 +0200
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 17:18 +0000
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 15:39 +0000
                Re: Anti-virus? "Carlos E. R." <robin_listas@es.invalid> - 2018-10-03 17:49 +0200
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 16:16 +0000
              Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-03 15:28 +0200
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-03 15:39 +0000
                Re: Anti-virus? "Carlos E.R." <robin_listas@es.invalid> - 2018-10-07 20:48 +0200
                Re: Anti-virus? Hergen Lehmann <hlehmann.expires.5-11@snafu.de> - 2018-10-07 21:40 +0200
      Re: Anti-virus? Alek <alek.trishan@gmail.com> - 2018-10-02 19:33 -0400
        Re: Anti-virus? Arlen   H  Holder <arlenh.older@no.spam.net> - 2018-10-03 02:40 +0000
          Re: Anti-virus? Alek <alek.trishan@gmail.com> - 2018-10-03 13:55 -0400
            Re: Anti-virus? nospam <nospam@nospam.invalid> - 2018-10-03 14:08 -0400
              Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-04 13:07 +0000
                Re: Anti-virus? nospam <nospam@nospam.invalid> - 2018-10-04 10:03 -0400
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-06 02:56 +0000
                Re: Anti-virus? "Carlos E.R." <robin_listas@es.invalid> - 2018-10-07 20:50 +0200
                Re: Anti-virus?  Arlen    Holder <a%rlenh.older@no.spam.net> - 2018-10-08 15:00 +0000
            Re: Anti-virus? "Carlos E.R." <robin_listas@es.invalid> - 2018-10-07 20:54 +0200
  Re: Anti-virus? Arlen   H  Holder <arlenh.older@no.spam.net> - 2018-10-02 02:47 +0000
  Re: Anti-virus? Andy Burns <usenet@andyburns.uk> - 2018-10-04 13:14 +0100

csiph-web