Blackberry Mobile Spyware - The Monkey Steals the Berries

ShmooCon VI - 2010

Presented by: Vikram Phatak
Date: Sunday February 07, 2010
Time: 10:00 - 11:00
Location: Back Room
Track: Build It!

<p>Spyware has become a primary tool used in the capture of personal and private data. Surreptitiously installed on the computing system of a target victim, spyware can capture, log, monitor, and exfiltrate any data that the spyware owner desires. Your phone holds all of the same personal information as your computer, only in a smaller form factor. While a number of "vendors" sell Blackberry spyware, until now only a limited number of public code examples exist. Real time capture of SMS messages, Emails, and phone call logs are a fraction of the features to be presented. Full source code to the spyware will also be released. Definition of the potential risk and threat involved in mobile related spyware is a requirement to implementation of security mechanisms. A fully functional reference code has yet to be presented and released that can be used in a positive manner. Until now only shady web sites selling compiled versions of spyware code for $100 or more dollars a copy exist. This is a future looking presentation that will help others learn about the security of their personal data in the time of mobile devices.</p>

Links

Tyler Shields

<p>Tyler Shields is a Senior Researcher for the Veracode Research Lab whose responsibilities include understanding and examining interesting and relevant security and attack methods for integration into the Veracode product offerings. In the past, Tyler has worked as a consultant for both @Stake and Symantec, delivering security assessments to fortune 500 companies, major financial institutions, institutions of higher education, and the highest levels of the U.S. government. Tyler has presented at major industry conferences including H.O.P.E and SOURCE Boston and released numerous security advisories.</p>


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats