Posted by: thetechieguy | May 14, 2008

Mobile Hacking - is it real or just hype ?

So here is the question - “are the mobile phones next on the hackers list of targets ?”

To answer this we have to look at how the mobile devices themselves. If we cast our minds back just a little bit, the mobile phones were just that - phones. You could make AND receive phone calls and have talk time of about 30 minutes before having to recharge that battery. This has completely changed and now we have phones that are in colour, have music capabilities, take photos and video clips with sound, store documents, record minutes of meetings, have Internet access, synchronise with our pc, have our appointments, emails and contacts etc. etc. etc. etc. - so in other words they are just like our PC (just smaller)

So going back to the question - hackers, virus writers, spammers - all look for the weakest link in order to attack it and exploit it. Finally over the years people have finally understood the need for anti-virus and firewalls and Updates - so the pc is getting harder and harder to access. However, how many people do you know who have their phone’s anti-virus installed and updated ? How many people have firewalls on their phone ? So are these mini-computers vulnerable ? You bet !!!

Think of it this way: You have your bluetooth enabled and set to discoverable with no protection, a hacker sitting in the same coffee shop secretly loads spyware software on your phone. You get back to the office and synchronise your phone with your pc and this software moves from your phone to your company network !

These days Identity theft is on the increase and you travel with your little min-computer/ phone all day and night - so hackers have easier access to your phone and therefore to your personal infromation.

So now what ?

Well, anti-virus companies are developign solutions for the mobile platform - find one and install it and keep it updated.

Make sure bluetooth is off untill you need it and make sure your Wi-Fi on your phone is also off untill you need to use it.

DO NOT put sensittive information or access sensitive websites (scuh as banking sites etc. )in a public hot spot

When you store info on your phone, put some sort of encryption on it at the very least come up with something that only you know. For example: if you store your PIN number invert the last two digits so a PIN 19876 becomes 19867

Be street wise -

add to del.icio.us : Add to Blinkslist : add to furl : Digg it : add to ma.gnolia : Stumble It! : add to simpy : seed the vine : : : TailRank : post to facebook:add to Muti

Responses

This post is right on the mark. The mobile device is increasingly taking on the ability of our standard desktop machines.

In addition to possibly losing sensitive info stored on the phone, consider the implications of false charges. (ie malware on your phone makes numerous calls around the world on your behalf) While the provider may remove the fradulent charges, we know how helpful they have been with other issues :(

Here’s a nice link to a bluetooth attack against the default pin of those bluetooth headsets.
http://www.youtube.com/watch?v=1c-jzYAH2gw</a<

-Michael Coates

Leave a response

Your response:

Categories