Malware y dispositivos móviles

download Malware y dispositivos móviles

of 11

Transcript of Malware y dispositivos móviles

  • 8/2/2019 Malware y dispositivos mviles

    1/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh 8 ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    c

    Gm ~gmi`j` kyom gr wj` ng m`r noru`ro~oy`r gmgb~tjob`r ng kh`t wr` hb~whmkgj~g* M`r

    ~gtkojhmgr xwg- gj wj utojbouo`- gr~hdhj ngr~ojhn`r h khj~gjgt h n`r ugtr`jhr

    b`kwjobhnhr kgnohj~g y`q- lhj hhnon` uhwmh~ojhkgj~g kr kr iwjbo`jhmonhngr

    g|~th* ^hm gr mh bhj~onhn ng u`rodomonhngr iwjbo`jgr xwg `itgbg wj ~gmi`j` kyom l` gj

    nh xwg rg lh hbwhn` wj jwgy` ~tkoj` uhth ngj`kojht h gr~`r noru`ro~oy`r1

    rkht~ul`jgr ~gmi`j`r oj~gmofgj~gr*

    Tgbogj~gkgj~g lhj huhtgbon` `~t`r fhnfg~r8 ~gbj`mfob`r xwg `itgbgj ,gj wj ~hkh`

    hmf` kh`t/ mhr korkhr u`rodomonhngr xwg m`r m~ok`r ~gmi`j`r kyomgr- ugt` roj mh

    u`rodomonhn ng tghmoqht mmhkhnhr- u`t hl`th* Rg ro~hj gj~tg gm ~gmi`j` kyom m`r

    jg~d``cr4

    M`r rkht~ul`jgr ~hdmg~r lhj ojb`tu`thn` mh b`kumgaonhn ngm `tngjhn`t ng wr`

    ugtr`jhm- b`j mhr ygj~hahr xwg gr~` b`jmmgyh* Roj gkdhtf`- gr~g hyhjbg lh ~gjon` b`k`

    b`jrgbwgjboh gigb~`r b`mh~gthmgr kgj`r ngrghdmgr- b`k` r`j m`r ut`dmgkhr ng

    rgfwtonhn mh btghboj ng khmvhtg grugbiob`* Mh huhtoboj ng gr~g ~ou` ng bnof`

    khmobo`r`- gj~tg `~t`r ihb~`tgr- lh ron` ut`uobohnh u`t mh fthj bhj~onhn ng nh~`r

    ugtr`jhmgr ng yhm`t xwg rg hmkhbgjhj gj m`r ~gmi`j`r ~hdmg~r- b`jr~o~wgjn` wj

    yhmo`r` d`~j uhth m`r h~hbhj~gr*

    rg mgr lh mmhkhn` ~hdmg~r`~hdmg~hr gmgb~tjobhr*

    O Xw `dag~oy` oj~gtgrh gj wj noru`ro~oy` kyom0

    Wjh ng mhr utojbouhmgr thq`jgr u`t mhr xwg m`r btghn`tgr ng khmvhtg lhj ngbonon`

    hkumoht rw thjf` ng hbboj h m`r noru`ro~oy`r kyomgr- gr mh fthj bhj~onhn ng oji`tkhboj

    ng yhm`t hmkhbgjhnh gj gmm`r gm lgbl` ng xwg- bhnh ygq b`j kh`t itgbwgjboh- rg

    tghmobgj `ugthbo`jgr ng jhygfhboj h ~thyr ng gmm`r*

    Yghk`r bwmgr r`j m`r utojbouhmgr `dag~oy`r xwg rg gjbwgj~thj gj gm uwj~` ng koth ng m`r

    btghn`tgr ng r`i~vhtg khmobo`r` uhth noru`ro~oy`r kyomgr*

    J`kdtgr ng wrwhto`r b`j~thrghr

    Hb~whmkgj~g- gm hbbgr` h mh kh`th ng iwjbo`jhmonhngr gj mh tgn tgxwogtg ng wj wrwhto`

    wjh b`j~thrgh* Gr~`r ro~o`r rwgmgj u`rggt oji`tkhboj ugtr`jhm xwg j` gr~ noru`jodmg

    udmobhkgj~g- roj` xwg ugt~gjgbg g|bmwroyhkgj~g hm wrwhto` ,b`ttg`r- nh~`r ugtr`jhmgr-

    oji`tkhboj b`jiongjbohm- g~b*/* Mh `d~gjboj ng hkd`r yhm`tgr ,ongj~oiobhn`t ngm wrwhto`

    8Noru`ro~oy` b`j wj ut`uro~` iwjboj grugbiob`r- fgjgthmkgj~g ng ugxwghr ut`u`tbo`jgr- utb~ob` g ojj`yhn`t* Rwgmgj

    ~gjgt wj norg` kr ojfgjo`r` xwg gm ng mh ~gbj`m`fh b`ttogj~g*

    4@tngjhn`t u`t~~om ng tgnwbonhr nokgjro`jgr*

    Ojr~o~w~`Jhbo`jhmng^gbj`m`fhrngmhB`kwjobhboj

    Bwhngtj` ng j`~hr ngm

    @DRGTYH^@TO@KHMVHTG _ NORU@RO^OY@R KYOMGR

    @DRGTYH^@TO@ NG MH RGFWTONHN NG MH OJI@TKHBOJ

    l~~u1`drgtyh~`to`*oj~gb`*gr

    http://observatorio.inteco.es/http://observatorio.inteco.es/http://observatorio.inteco.es/
  • 8/2/2019 Malware y dispositivos mviles

    2/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh 4 ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    rw b`j~thrgh/ ugtko~oth rwumhj~ht mh ongj~onhn ng mh ugtr`jh h mh xwg mg lhj ron`

    rwr~thn` m`r nh~`r* ^hkdoj ugtko~oth h wj h~hbhj~g `d~gjgt hbbgr` h `~t`r nh~`r ng

    jn`mg ugtr`jhm*

    Tgrugb~` h mhr b`j~thrghr w~omoqhnhr uhth mh dhjbh `jmojg- j` gr wj nh~` xwg rg rwgmh

    hmkhbgjht b`k` ~hm gj wj noru`ro~oy` kyom- ugt` m~okhkgj~g hmfwjhr gj~onhngr

    dhjbhtohr lhj b`kgjqhn` h gjyoht RKR b`j b`j~thrghr ~gku`thmgr ,lhdo~whmkgj~g ng

    wj r`m` wr`/ uhth gm hbbgr` h bogt~`r rgtyobo`r* Hj~g gr~h kgnonh ng rgfwtonhn- ~t`hj`r

    b`k` gm b`j`bon` Qgwr lhj lgbl` rw huhtoboj gj noygtrhr umh~hi`tkhr- gj~tg gmmhr

    Dmhbcdgtt- n`jng oj~gtbgu~h m`r RKR b`j mhr bmhygr gjyohnhr u`t mh gj~onhn dhjbhtoh2

    @~thr i`tkhr gj mhr xwg u`nthj rgt w~omoqhnhr wjhr btgngjbohmgr t`dhnhr j` higb~hj ng

    i`tkh ~hj notgb~h hm wrwhto` h~hbhn`* H ygbgr- xwogjgr gr~j ng~tr ngm t`d` ng mhrbtgngjbohmgr- rokumgkgj~g ngrghj lhbgt mmgfht uwdmobonhn ugtr`jhmoqhnh ` w~omoqht mh

    bwgj~h uhth tghmoqht gjfh`r kr btgdmgr- u`t gagkum` gjyohjn` ngrng grh bwgj~h

    kgjrhagr h ~`n`r m`r b`j~hb~`r b`j gjmhbgr h ro~o`r vgd khmobo`r`r*

    *

    Hb~whmkgj~g- gj m`r rkht~ul`jgr ~hdmg~r rg uwgng mmgfht h hmkhbgjht mh korkh

    bhj~onhn ng b`j~thrghr xwg gj wj `tngjhn`t ng r`dtgkgrh* Gj b`jbtg~`- gr b`kj

    fwhtnht mhr btgngjbohmgr ng rgtyobo`r ng tgngr r`bohmgr ,Ihbgd``c- ^wgj~o- ^vo~~gt- g~b*/ `

    ng b`kwjobhboj ojr~hj~jgh ,Vlh~rHuu- Rcug- Kgrrgjfgt- g~b*/*

    Nh~`r ng i`tkwmhto`r

    @~t`r uwj~`r ngrng n`jng rg u`nthj `d~gjgt nh~`r ugtr`jhmgr ng oj~gtr r`j ~`n`r m`r

    i`tkwmhto`r ng mhr vgdr h mhr xwg rg rwgmg hbbgngt ngrng gr~`r noru`ro~oy`r* M`r

    i`tkwmhto`r kr ngrghn`r u`t m`r h~hbhj~gr r`j m`r tgmh~oy`r h b`kuthr `jmojg- gj m`r

    xwg rg oj~t`nwbgj m`r nh~`r bwh `d~gjboj uwgng ~thnwbotrg tuonhkgj~g gj dgjgiobo`r

    gb`jkob`r- b`k` r`j m`r tgigtgj~gr h ~htag~hr ng btno~`*

    Gm hwkgj~` ng mh w~omoqhboj ng mh dhjbh `jmojg h ~thyr ng noru`ro~oy`r kyomgr- fthbohr h

    xwg ngrng mhr korkhr gj~onhngr rg ihbomo~h gm hbbgr` hnhu~hjn` rwr vgdr `ngrhtt`mmhjn` humobhbo`jgr uhth fgr~o`jhtm`- gr `~t` ng m`r utojbouhmgr ihb~`tgr xwg gr~

    h~thgjn` gm norg` ng khmvhtg uhth gr~hr umh~hi`tkhr*

    Nh~`r n`bwkgj~`r utoyhn`r

    Huht~g ng m`r nh~`r ugtr`jhmgr grugbiob`r- ~hkdoj ~ogjg fthj oj~gtr mh `d~gjboj ng

    n`bwkgj~`r xwg rm` rg gjbwgj~thj noru`jodmgr gj bogt~`r btbwm`r bgtthn`r* Gj gr~g

    rgj~on` u`nth ojbmwotrg gm gruo`jhag ojnwr~tohm gm t`d` ng n`bwkgj~`r ng kdo~`

    2QgwR Ko~k`1 Khj+oj+~lg+k`domg1l~~u1rgbwto~dm`f*r48rgb*b`k45855?qgwr+ko~k`+khj+oj+k`domg+o*l~km

    http://securityblog.s21sec.com/2010/09/zeus-mitmo-man-in-mobile-i.htmlhttp://securityblog.s21sec.com/2010/09/zeus-mitmo-man-in-mobile-i.htmlhttp://securityblog.s21sec.com/2010/09/zeus-mitmo-man-in-mobile-i.htmlhttp://securityblog.s21sec.com/2010/09/zeus-mitmo-man-in-mobile-i.html
  • 8/2/2019 Malware y dispositivos mviles

    3/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh 2 ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    ugtr`jhm* B`jbtg~hkgj~g- gm h~hbhj~g xwg dwrxwg gr~g ~ou` ng oji`tkhboj rg bgj~tht

    utojbouhmkgj~g gj i`~`fthihr- b`ttg`r gmgb~tjob`r kgjrhagr RKR ` KKR*

    Mh b`k`nonhn ihbomonhn xwg ut`uoboh mh w~omoqhboj ng ~hdmg~hr gmgb~tjobhr uhth mh mgb~wthng ~`n` ~ou` ng n`bwkgj~`r ng ~g|~` ` yorwhmoqhboj ng okfgjgr- nohfthkhr- g~b*-

    ~hkdoj ut`uoboh gm hmkhbgjhkogj~` ng gr~`r htbloy`r gj gm huhth~`* Ngdon` h mh

    k`yomonhn iwjbo`jhmonhn xwg ut`u`tbo`jhj- lhj tgrwm~hn` rgt kw u`uwmhtgr gj gj~`tj`r

    gkutgrhtohmgr*

    _h rg lhj b`j`bon` bhr`r ng ugtr`jhagr ihk`r`r xwg lhj ron` yb~okhr ng gr~`r

    h~hxwgr- h m`r xwg mgr iwgt`j rwr~thn`r nh~`r ugtr`jhmgr- i`~`r b`kut`kg~onhr `

    oji`tkhboj tgmgyhj~g* Gj hmfwj`r bhr`r rg uwgng mmgfht h ugnot wj tgrbh~g u`t gr~`r

    nh~`r*

    Kgjrhagr utgkowk

    J` rogkutg gm `dag~oy` ngm khmvhtg gr fgjgtht wj dgjgiobo` fthbohr h mh `d~gjboj ng

    nh~`r ` b`j~thrghr xwg kr ~htng uwgnhj rgt w~omoqhnhr* G|or~g wjh yh kr tuonh ng

    mwbthtrg fthbohr h mh ojigbboj ng wj noru`ro~oy` kyom- rw job` tgxwgtokogj~` gr xwg

    r~g u`rgh mh bhuhbonhn ng gjyoht kgjrhagr ng ~g|~`* G|or~g khmvhtg uhth kyomgr

    oj~gmofgj~gr xwg rg gjbhtfh ng nht mhr tngjgr ugt~ojgj~gr hm ~gmi`j` uhth gjyoht

    kgjrhagr h jkgt`r utgkowk>

    Wj bhr` ng gr~g u`uwmht khmvhtg xwg higb~h b`jbtg~hkgj~g h noru`ro~oy`r Hjnt`on gr mh

    ihkomoh Hjnt`on*Uahuur* M`r wrwhto`r rwgmgj ugtbh~htrg ngm ut`dmgkh bwhjn` tgbodgj

    kgjrhagr RKR j` r`mobo~hn`r- u`t m`r xwg rg mgr b`dth wjh bhj~onhn- ` bwhjn` tgbodgj

    wjh ihb~wth xwg j` b`ttgru`jng b`j mh tghmonhn ng wr`*

    * M`r kgjrhagr gjyohn`r ojhnygt~onhkgj~g u`t gm ~gmi`j`

    hm jkgt` ,xwg gr ut`uognhn ngm h~hbhj~g ` rg gjbwgj~thj hr`bohn`r/- fgjgthj wjh

    b`koroj ng mh xwg `d~ogjg wj dgjgiobo` notgb~`*

    @~th yhtognhn ng h~hxwg rokomht b`jror~g gj ojr~ht hm wrwhto` h tghmoqht wjh mmhkhnh ` h

    gjyoht wj kgjrhag h gr~g ~ou` ng ~gmi`j`r* Mh utojbouhm yh uhth tghmoqht gr~g h~hxwg

    rwgmg rgt h ~thyr ng RKR gj gm xwg rg ut`kg~g wj utgko` ` tgb`kugjrh u`t gm gjy` ngkgjrhagr* Gr~g bhr` j` okumobh ojigbboj- roj` ojfgjogth r`bohm*

    Rgbwgr~t` ngm noru`ro~oy`

    M`r ~gtkojhmgr ugtko~gj- h ~thyr ng noigtgj~gr k~`n`r- dm`xwght gm ror~gkh uhth xwg j`

    uwgnh rgt w~omoqhn` ro j` rg b`j`bg wj bnof` gj b`jbtg~`* ^hkdoj gr u`rodmg

    ngrlhdomo~ht mhr mmhkhnhr ` j` ugtko~ot gm hbbgr` h m`r nh~`r hmkhbgjhn`r kgnohj~g gm

    boithn`*

    >Jkgt`r ng ~htoiobhboj grugbohm xwg itgbgj rgtyobo`r ng j`~oiobhboj gjy` ng RKR h wj utgbo` rwugto`t hm lhdo~whm*

  • 8/2/2019 Malware y dispositivos mviles

    4/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh > ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    G|or~g khmvhtg uhth kyomgr xwg dm`xwgh gm hbbgr` h m`r nh~`r ` h bogt~hr

    iwjbo`jhmonhngr- uonogjn` wj tgrbh~g uhth tgbwugtht gm gr~hn` `tofojhm ngm noru`ro~oy`* R`j

    ~bjobhr h w~omoqhnhr b`j |o~` gj m`r `tngjhn`tgr ng r`dtgkgrh* Gr~g ~ou` ng khmvhtg

    gr b`j`bon` b`k` $thjr`kvhtg$*

    OO @~t`r `dag~oy`r ngm khmvhtg

    Hngkr ngm t`d` ng oji`tkhboj mh drxwgnh ng fhjhjbohr gb`jkobhr- g|or~gj `~thr

    u`rodmgr k`~oyhbo`jgr uhth m`r h~hxwgr g ojigbbo`jgr ng noru`ro~oy`r kyomgr*

    Ngk`r~thboj ng bhuhbonhn

    Hwjxwg mh fthj kh`th ngm khmvhtg xwg hb~whmkgj~g rg btgh rg gjbwgj~th gj

    botbwmhboj ~ogjg b`k` `dag~oy` mh drxwgnh ng wj dgjgiobo` gb`jkob` ,notgb~` `ojnotgb~`/- ~`nhyh gr u`rodmg gjb`j~tht bnof` khmobo`r` xwg rg bgj~th utojbouhmkgj~g gj

    mh ngk`r~thboj ng u`ngt ngm btghn`t* Ojobohmkgj~g- gr~g ~ou` ng khmvhtg rg tghmoqh b`j gm

    ioj ng u`jgt h utwgdh m`r b`j`bokogj~`r ngr~tgqh ng xwogj m` fgjgth*

    Gr~g iwg gm `tofgj ng mhr utokgthr kwgr~thr ng khmvhtg xwg lobogt`j rw huhtoboj lhbg

    wj`r 25 h`r- bw` job` `dag~oy` gth mh drxwgnh ng mh ihkh mh ngk`r~thboj mhr

    lhdomonhngr ng m`r btghn`tgr hj~gr gm tgr~` ng mh b`kwjonhn* Gj wj gj~`tj` tgmh~oyhkgj~g

    ojg|um`thn`- b`k` gr ~`nhyh gm ng m`r rkht~ul`jgr- hj gr lhdo~whm gjb`j~tht utwgdhr

    ng b`jbgu~` g|ugtokgj~`r* Gj hmfwj`r bhr`r gr~`r g|ugtokgj~`r rg w~omoqhj uhth

    ngrhtt`mmht gj gm iw~wt` bnof` kr gigb~oy`*

    D`~jg~r

    Mhr mmhkhnhr d`~jg~r r`j tgngr i`tkhnhr u`t wj fthj jkgt` ng gxwou`r ojigb~hn`r-

    ~hkdoj b`j`bon`r b`k` q`kdor* Gr~`r noru`ro~oy`r rg gjbwgj~thj b`j~t`mhn`r u`t wj

    ut`fthkh khmobo`r`- xwg ugtko~g xwg uwgnhj rgt khjgahn`r ng i`tkh tgk`~h u`t wjh

    kxwojh bgj~thm- gjbhtfhnh ng k`jo~`toqht h ~`n` gm b`jawj~` ng nhtmgr mhr tngjgr

    uhth mhr xwg gr~j ut`fthkhn`r* ^hkdoj rg w~omoqhj b`k` fthjah ng ror~gkhr xwg

    ugtko~g `d~gjgt kh`t u`~gjboh ng bkuw~` hr u`ngt gjyoht b`ttg` dhrwth ` tghmoqhth~hxwgr ng ngjgfhboj ng rgtyobo` ,dm`xwg`/ ng ufojhr vgd u`t rh~wthboj*

    Mhr d`~jg~r r`j lhdo~whmgr gj gm kwjn` ng m`r ror~gkhr ng r`dtgkgrh hb~whmkgj~g

    gr~j b`kgjqhjn` h ngruwj~ht gj~tg m`r ~gmi`j`r oj~gmofgj~gr*

    Wj` ng m`r gagkum`r kr r`jhn`r ng gr~g ~ou` ng ojigbboj gj noru`ro~oy`r kyomgr gr gm

    ngm ~t`hj` b`j`bon` b`k` Fgokojo* Gr~g ~t`hj` rg ojr~hmh h ~thyr ng humobhbo`jgr

    mgf~okhr h mhr xwg rg mgr hhnh gm bnof` khmobo`r` ng gr~g ~t`hj`* Gj~tg rwr

    iwjbo`jhmonhngr rg gjbwgj~thj ngrng gm gjy` ng oji`tkhboj r`dtg gm lhtnvhtg ,~ou`

    BUW- khtbh- g~b*/ nh~`r b`k` jkgt` ng ~gmi`j`- nh~`r ng mh tgn- OKGO- g~b* lhr~h

  • 8/2/2019 Malware y dispositivos mviles

    5/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh 7 ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    u`ngt tgbodot tngjgr ng rgtyon`tgr `togj~hn`r hm b`j~t`m ng mh tgn ng noru`ro~oy`r

    ojigb~hn`r*

    Omwr~thboj 81 Gr~twb~wth agttxwobh ng d`~jg~r

    Iwgj~g1 Grg~*b`k

    OOO I`tkhr ng ojigbboj

    Gj gr~g huht~hn` rg ngr~hbhj hmfwj`r ng m`r uwj~`r ng ojigbboj b`kjkgj~g w~omoqhn`r

    u`t m`r h~hbhj~gr gj mh hb~whmonhn*

    Tgngr r`bohmgr

    Wjh ng mhr i`tkhr kr wrhnhr uhth `d~gjgt nh~`r ugtr`jhmgr ` b`kut`kg~gt wjh bwgj~h

    gr h ~thyr ng ihmrhr iwjbo`jhmonhngr hhnonhr h wjh tgn r`bohm* Lhdo~whmkgj~g mhr tgngr

    r`bohmgr `itgbgj awgf`r humobhbo`jgr hnobo`jhmgr* M`r h~hbhj~gr rwgmgj btght

    humobhbo`jgr ihmrhr xwg ojbo~hj hm wrwhto` h rw ojr~hmhboj u`t ~hj~`- mmgyhj h mh ojigbboj

    ngm ~gmi`j` noru`ro~oy` kyom*

    @~th yhtohj~g ng gr~g ~ou` ng h~hxwgr r`j m`r ro~o`r vgd g|~gtj`r h mhr tgngr r`bohmgr xwg

    `itgbgj rwuwgr~hr iwjbo`jhmonhngr g|~th* M`r utojbouhmgr gjfh`r ~thkuhr w~omoqhnhr

    uhth h~thgt hm udmob` rwgmgj rgt humobhbo`jgr xwg hrgfwthj ugtko~ot b`j`bgt xw

    ugtr`jhr yoro~hj wj ugtiom ` xwoj lh dm`xwghn` wjh bwgj~h gj m`r ror~gkhr ng

    kgjrhagth* Gr~g ~ou` ng humobhbo`jgr j` g|or~gj j` bwkumgj tghmkgj~g mh iwjboj xwg

    ut`kg~gj*

  • 8/2/2019 Malware y dispositivos mviles

    6/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh 9 ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    Nobl`r ro~o`r ithwnwmgj~`r rwgmgj tgxwgtot mh oj~t`nwbboj ng m`r nh~`r ugtr`jhmgr

    jgbgrhto`r uhth hbbgngt h mh bwgj~h* Hr- gr~hr humobhbo`jgr- hngkr ng j` bwkumot rw

    iwjboj- ojigb~htj gm ror~gkh d~gjntj nh~`r ugtr`jhmgr*

    B`ttg` gmgb~tjob`

    Gm b`ttg` gr wj` ng m`r kgno`r ~thnobo`jhmgr ng ojigbboj gj noru`ro~oy`r gmgb~tjob`r

    gr~` rg lh ~thrmhnhn` h m`r ~gtkojhmgr kyomgr* Hm ofwhm xwg gj gm bhr` ng m`r ror~gkhr ng

    r`dtgkgrh- m`r h~hbhj~gr gjyhj hm b`ttg` ut`fthkhr bhkwimhn`r- ojbo~hjn` hm wrwhto` h

    xwg m`r gagbw~g gj rw ~gtkojhm* B`j gr~` b`jrofwgj ojigb~ht gm ror~gkh- lhbogjn` btggt hm

    wrwhto` xwg lh ojr~hmhn` wjh humobhboj*

    ^ogjnhr ng humobhbo`jgr

    Hb~whmkgj~g mhr utojbouhmgr umh~hi`tkhr ng ~gtkojhmgr u`rggj wjh ~ogjnh `iobohm ng

    humobhbo`jgr- ~hkdoj b`j`bonhr b`k` r~`tgr` khtcg~r* Gj gmmhr rg uwgngj gjb`j~tht

    fthj bhj~onhn ng ut`fthkhr bmhroiobhn`r rgfj rw bh~gf`th- b`j yhm`thbo`jgr

    b`kgj~hto`r ng m`r wrwhto`r xwg gjtoxwgbgj mh g|ugtogjboh b`j gm noru`ro~oy`*

    Omwr~thboj 41 Gagkum` ng ~ogjnh ng humobhbo`jgr

    Iwgj~g1 Hjnt`on Khtcg~

    Bhnh ~ogjnh yot~whm rofwg rw ut`uoh u`m~obh uhth b`j~t`mht mhr humobhbo`jgr xwg rg u`jgj h

    noru`roboj ngm udmob`- rogjn` hmfwjhr kr tgr~tob~oyhr xwg `~thr* Gr~` xwogtg ngbot xwg

    mhr humobhbo`jgr r`j r`kg~onhr h b`j~t`mgr kr ` kgj`r tofwt`r`r uhth ng~gb~ht khmvhtg

    ` b`ku`t~hkogj~`r r`rugbl`r`r gj gmmhr hj~gr ng xwg uwgnhj rgt ngrbhtfhnhr u`t gm

    udmob`* Hwj b`j gr~`r b`j~t`mgr- rg lhj nhn` bhr`r gj m`r xwg mhr ~ogjnhr `iobohmgr lhj

  • 8/2/2019 Malware y dispositivos mviles

    7/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh 6 ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    hm`ahn` humobhbo`jgr ojigb~hnhr* Gm wrwhto` ngdgt ~`kht mhr k|okhr utgbhwbo`jgr h mh

    l`th ng ojr~hmht bwhmxwogt r`i~vhtg- hwjxwg ut`ygjfh ng wjh ~ogjnh `iobohm*

    Hb~whmkgj~g g|or~gj n`r k`ngm`r ng u`m~obhr noigtgj~gr gj bwhj~` h mh rwugtyoroj ng mhr

    humobhbo`jgr gj gr~hr ~ogjnhr* Gm utokgt` gr gm ng mhr ~ogjnhr xwg u`rggj wjh u`m~obh ng

    b`j~t`m ng mhr humobhbo`jgr xwg tgxwogtg xwg ~`nhr rghj tgyorhnhr u`t mh ut`uoh gkutgrh*

    Gj gm `~t` g|~tgk`- rg gjbwgj~th gm k`ngm` ng ~ogjnh gj gm xwg bwhmxwogt ngrhtt`mmhn`t

    uwgng u`jgt h noru`roboj ng mh b`kwjonhn wjh humobhboj btghnh u`t m kork`- roj xwg

    gr~` okumoxwg wjh rwugtyoroj utgyoh tofwt`rh ng noblhr humobhbo`jgr* Gr~g rgfwjn`

    k`ngm` rwgmg bwdtot rw niobo~ ng rwugtyoroj `iobohm kgnohj~g mh b`mhd`thboj ng hmfwj`r

    wrwhto`r- xwg b`kutwgdhj g|~th`iobohmkgj~g hmfwjhr humobhbo`jgr tgu`t~hjn` m`r u`rodmgr

    ut`dmgkhr xwg gjbwgj~thj*

    ^hkdoj gr u`rodmg gjb`j~tht $~ogjnhr hm~gtjh~oyhr$ xwg `itgbgj humobhbo`jgr uhth gr~`r

    noru`ro~oy`r roj gr~ht yojbwmhnhr h mhr gkutgrhr khtbhr xwg ngrhtt`mmhj m`r ror~gkhr

    `ugth~oy`r* Gj gr~g bhr` mhr humobhbo`jgr j` jgbgrhtohkgj~g lhj ng uhrht u`t wj b`j~t`m

    ` rwugtyoroj ng rgfwtonhn*

    U`t `~t` mhn`- g|or~g wjh fthj bhj~onhn ng humobhbo`jgr noru`jodmgr gj Oj~gtjg~ Uwgngj

    gjb`j~thtrg ~hj~` gj ufojhr vgd ngnobhnhr g|bmwroyhkgj~g h gmm` b`k` gj i`t`r r`dtg

    noygtr`r ~gkhr gj~tg m`r xwg rg uwgngj ojbmwot gr~g ~ou` ng humobhbo`jgr* Gj gr~`r bhr`r

    j` g|or~g jojfj hyhm ng rwugtyoroj ` b`j~t`m `iobohm*

    ^hj~` gj gm bhr` ng ~ogjnhr b`j wj joygm ng b`j~t`m gmgyhn`- b`k` gj mhr ~ogjnhr xwg j`

    bwgj~hj b`j jojfj ~ou` ng b`j~t`m rg uwgng gjb`j~tht hmfwjh humobhboj b`j iojgr

    khmobo`r`r*

    Tgngr m`bhmgr ,VoIo/

    Hb~whmkgj~g- mh fthj kh`th ng m`r noru`ro~oy`r kyomgr oj~gmofgj~gr u`rgg mh bhuhbonhn

    ng b`jgb~htrg h Oj~gtjg~* Gr~` rwgmg lhbgtrg kgnohj~g wjh b`jg|oj notgb~h ng nh~`r

    ,FUTR ` 2F/ h ~thyr ng mhr tgngr ng wj `ugthn`t kyom ` kgnohj~g mh b`jg|oj h wjhtgn ng tgh m`bhm xwg ut`u`tbo`jh hbbgr` h Oj~gtjg~ ,Vo+Io/*

    Gj gr~g m~ok` ~ou` ng tgngr- wj noru`ro~oy` xwg rg gjbwgj~tg ojigb~hn` u`nth ojoboht wjh

    drxwgnh ng `~t`r `dag~oy`r gj mh korkh tgn m`bhm- b`j mh oj~gjboj ng ojigb~htm`r*

  • 8/2/2019 Malware y dispositivos mviles

    8/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh < ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    Omwr~thboj 21 Yor`t ng tgngr Vo+Io noru`jodmgr

    Iwgj~g1 grigthoul`jg*b`k

    @~t` ugmoft` hm xwg rg gjitgj~hj m`r noru`ro~oy`r kyomgr xwg rg b`jgb~hj h tgngr Vo+Io gr

    mh iohdomonhn ng mh b`jg|oj* Wjh tgn Vo+Io j` ut`~gfonh uwgng ugtko~ot h h~hbhj~gr

    b`jgb~hn`r h mh korkh tgn mh `d~gjboj ngm ~tiob` j` boithn` fgjgthn` u`t gm noru`ro~oy`

    ,m`r nh~`r xwg botbwmhj u`t mh tgn/*

    Dmwg~``~l

    @~th ~gbj`m`fh hkumohkgj~g g|~gjnonh gr mh b`j`bonh b`k` dmwg~``~l* Rg ~th~h ng wj

    ut`~`b`m`- `togj~hn` utojbouhmkgj~g hm oj~gtbhkdo` ng nh~`r gj~tg n`r noru`ro~oy`r- kw

    u`uwmht hj~gr ng xwg rg g|~gjnogth gm wr` ng Vo+Io g Oj~gtjg~ gj m`r ~gtkojhmgr kyomgr*

    Wj kyom ojigb~hn` u`nth ojoboht wjh drxwgnh ng `~t`r noru`ro~oy`r b`j gm ror~gkh

    dmwg~``~lhb~oyhn`* Ro mh jwgyh yb~okh hbgu~h mh b`jg|oj- gm ojigb~hn` u`nth gjyoht gm

    bnof` xwg rg gagbw~hth gj gm noru`ro~oy`* Hmfwjhr gkutgrhr ~hkdoj w~omoqhj gr~g

    k~`n` uhth gjyoht uwdmobonhn j` r`mobo~hnh h ~thyr ng dmwg~``~lh m`r huhth~`r xwg m`

    ~ogjgj hb~oy` gj wj thno` ng hbboj ng wj`r 855 kg~t`r* Wj khmvhtg huhtgbon` gj 4559

    mmhkhn` B`kkvhtto`t- ngr~ojhn` gr~h ygq h Rkdohj- hut`ygblhdh- gj~tg `~thr- mhr

    b`kwjobhbo`jgr dmwg~``~lb`k` kgno` ng ut`uhfhboj*

  • 8/2/2019 Malware y dispositivos mviles

    9/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh ? ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    Ywmjgthdomonhngr

    M`r rkht~ul`jgrw~omoqhj r`i~vhtg b`kumga` u`t ~hj~`- j` gr~j g|gj~`r ng b`j~gjgt

    ywmjgthdomonhngr* Gr~`r ihmm`r gj m`r ut`fthkhr ugtko~othj h m`r h~hbhj~gr gagbw~ht

    bnof` gj gm ror~gkh- u`t gagkum` b`j r`m` yoro~ht wjh ufojh vgd ro gm ut`fthkh

    ywmjgthdmg gr gm jhygfhn`t*

    Mhr ywmjgthdomonhngr g|um`~hnhr h ~thyr ng ufojhr vgd bhtfhj wj b`j~gjon`

    grugbohmkgj~g utguhthn` uhth xwg `bwtth gm ihmm` rg hut`ygblg mh ywmjgthdomonhn hm rgt

    ut`bgrhn`* Gr~g ~ou` ng ywmjgthdomonhngr uwgngj ~gjgt noigtgj~gr tgugtbwro`jgr- ngrng

    lhbgt xwg gm ut`fthkh ` gm noru`ro~oy` gj~gt` ngag ng iwjbo`jht- lhr~h xwg gm jhygfhn`t

    uwgnh gagbw~ht bnof` ~`kht gm b`j~t`m ngm huhth~`*

    Wj` ng m`r gagkum`r kr b`j`bon`r hkumohkgj~g w~omoqhn`r- gj utojbouo` j` ngr~ojhn` h

    mh ojigbboj- gr gm k~`n` w~omoqhn` uhth modgtht ,gmokojht mhr moko~hbo`jgr gr~hdmgbonhr

    u`t rw ihdtobhj~g/ m`r noru`ro~oy`r xwg w~omoqhj gm ror~gkh `ugth~oy` o@R- gj~tg `~t`r* M`

    xwg ugtko~g tghmoqht gr~h modgthboj gr utgborhkgj~g hut`ygblht noigtgj~gr

    ywmjgthdomonhngr ngm r`i~vhtg `tofojhm*

    OY Ut`~gbboj

    Hm ofwhm xwg gj gm bhku` ng m`r ror~gkhr ng r`dtgkgrh- rg ngdgj rgfwot bwh~t` j`tkhr

    drobhr xwg rotygj uhth ut`~gfgt bwhmxwogt noru`ro~oy` oji`tk~ob`1

    Khj~gjgt gm noru`ro~oy` hb~whmoqhn` b`j mhr m~okhr ygtro`jgr ngm ror~gkh

    `ugth~oy` ngm r`i~vhtg ojr~hmhn`*

    Lhbgt wr` ng noigtgj~gr ugtiomgr ng wrwhto` bwhjn` rgh u`rodmg* Rg ngdg wrht

    hxwgm xwg ~gjfh m`r utoyomgfo`r kjok`r jgbgrhto`r uhth mh w~omoqhboj gm ror~gkh

    gj mwfht ng wj ugtiom ng hnkojor~thn`t b`j ~`n`r m`r ugtkor`r*

    J` ojr~hmht r`i~vhtg ng tgu`ro~`to`r j` `iobohmgr ` ng nwn`rh ut`bgngjboh*

    Ojr~hmht wj ror~gkh hj~okhmvhtg gj bhr` ng xwg g|or~h*

    @~t`r b`jrga`r `togj~hn`r h mh ut`~gbboj itgj~g h noygtrhr i`tkhr ng gjfh` ygb~`tgr

    ng gj~thnh ng khmvhtg u`nthj rgt1

    Gr~hdmgbgt wjh b`j~thrgh ~hj~` uhth gm gjbgjnon` b`k` uhth gm ngrdm`xwg` ngm

    ~gtkojhm* ^hkdoj gr jgbgrhto` k`noiobht ~`nhr mhr bmhygr xwg gr~j gr~hdmgbonhr

    u`t ngigb~` uhth ugtr`jhmoqhtmhr* Hr rg gyo~hthj bhr`r b`k` gm ng bogt~`r

    k`ngm`r ng noru`ro~oy`r modgthn`r- gj m`r xwg ~`n`r b`kuht~gj wjh korkh

    b`j~thrgh u`t ngigb~`*

  • 8/2/2019 Malware y dispositivos mviles

    10/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh 85 ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    Hm b`jgb~htrg h wjh tgn Vo+Io hagjh- gyo~ht gm gjy` ng nh~`r ugtr`jhmgr

    gm wr`

    ng mh dhjbh `jmojg*

    B`kut`dht gm `tofgj mh b`jiohjqh ng bwhmxwogt ~ou` ng b`j~gjon`

    ,gagbw~hdmgr-

    n`bwkgj~`r***/ xwg yhh h rgt ngrbhtfhn`- ojr~hmhn` ` hdogt~` b`j bwhmxwogt

    ut`fthkh* Gj bhr` ng ~th~htrg ng r`i~vhtg- b`kut`dht xwg mhr humobhbo`jgr rg

    gjbwgj~tgj iotkhnhr u`t rw ihdtobhj~g `tofojhm*

    J` hbgu~ht jo lhbgt bhr` ng kgjrhagr ng b`ttg` gmgb~tjob`- RKR- KKR- g~b* ng

    `tofgj ngrb`j`bon`

    b`kut`dht mh hw~gj~obonhn ng b`j m`r kgjrhagr ut`ygjogj~gr

    ng b`j~hb~`r ng b`jiohjqh ugt` bw` b`j~gjon` rg rhmfh ng mh j`tkhmonhn* J`

    yoro~ht ngrng gm noru`ro~oy` m`r gjmhbgr h ufojhr xwg rghj ut`uwgr~`r h ~thyr ng

    kgjrhagr- b`ttg`- kgjrhagth ojr~hj~jgh- g~b*

    B`jiofwtht gm jhygfhn`t fgr~`t ng b`ttg`

    Omwr~thboj >1 @ubo`jgr ng yorwhmoqhboj ngm b`ttg` gmgb~tjob`

    uhth xwg gm b`j~gjon` ng m`r b`ttg`r

    gmgb~tjob`r j` rgh bhtfhn` u`t ngigb~`- jo rg yorwhmobg gj k`n` L^KM*

    Ngrlhdomo~ht mh bhtfh ng b`j~gjon` g|~gtj` h mh l`th ng mh utgyorwhmoqhboj

    mgb~wth ng b`ttg`r gmgb~tjob`r*

    Iwgj~g1 OJ^GB@

    J` hbgu~ht b`jg|o`jgr jo ~thjrigtgjbohr j` r`mobo~hnhr ` ng `tofgj ngrb`j`bon`

    yh dmwg~``~l` ojithtt`a`r*

  • 8/2/2019 Malware y dispositivos mviles

    11/11

    Khmvhtg noru`ro~oy`r kyomgr Ufojh 88 ng 88@drgtyh~`to` ng mh Rgfwtonhn ng mh Oji`tkhboj

    Khj~gjgt ~`n`r m`r nh~`r rgjrodmgr ut`~gfon`r

    itgj~g h hbbgr`r j` ugtko~on`r

    kgnohj~g gm boithn`*

    Tghmoqht ugtonobhkgj~g wjh b`uoh ng rgfwtonhn

    ngm ror~gkh ~`n`r rwr nh~`r

    uhth u`ngt tgbwugthtm`r gj bhr` ng utnonh ` hygth ngm noru`ro~oy`*

    B`jrgtyht gm bnof` OKGO ngm ~gmi`j` kyom uhth xwg- gj bhr` ng utnonh ` t`d`

    ngm ~gtkojhm- r~g uwgnh rgt dm`xwghn`*

    vvv*ihbgd``c*b`k@drgtyhOJ^GB@

    vvv*~vo~~gt*b`k@drgtyhOJ^GB@

    vvv*oj~gb`*grdm`fRgfwtonhn@drgtyh~`to`Dm`fRgfwtonhn

    vvv*`w~wdg*b`k@drgtyhOJ^GB@

    vvv*rbtodn*b`k@drgtyhOJ^GB@

    vvv*rmongrlhtg*jg~@drgtyhOJ^GB@

    `drgtyh~`to`Eoj~gb`*gr

    http://www.facebook.com/ObservaINTECOhttp://www.twitter.com/ObservaINTECOhttp://www.inteco.es/blog/Seguridad/Observatorio/BlogSeguridadhttp://www.youtube.com/ObservaINTECOhttp://www.scribd.com/ObservaINTECOhttp://www.slideshare.net/ObservaINTECOhttp://www.slideshare.net/ObservaINTECOmailto:[email protected]:[email protected]:[email protected]://www.slideshare.net/ObservaINTECOhttp://www.scribd.com/ObservaINTECOhttp://www.youtube.com/ObservaINTECOhttp://www.inteco.es/blog/Seguridad/Observatorio/BlogSeguridadhttp://www.twitter.com/ObservaINTECOhttp://www.facebook.com/ObservaINTECO