Risky Business #116 -- Veracode's Chris Eng talks Blackberry spyware

2 replies [Last post]
Patrick Gray
Patrick Gray's picture
Offline
Veteran Member
BloggerNetcasterSite Owner
Joined: 03/02/2009

This week's show is hosted by Vigabyte and sponsored by Sophos. You'll hear from Sophos's Paul Ducklin later on in the show in this week's sponsor interview.

This week's feature interview is with Chris Eng of Veracode, and we'll be chatting about his analysis of a nasty bit of blackberry spyware that was pushed out to all blackberry users on UAE-based carrier Etisalat.

And of course we're joined by Adam Boileau for a discussion of the week's news.

ch0pstick
ch0pstick's picture
Offline
Newbie
Joined: 07/03/2009
Shameless self-promotion

Chris Eng's interview was awesome! Good stuff indeed. Chris said that they spent only a short amount of time on the BB spyware from Etisalat. I spent a little time on it as well and did a paper on it. You can find it here: http://chirashi.zensay.com/whitepapers I installed the spyware on the BB simulator and on my own Bold to examine it in action, including simulating the server that the spyware would send the intercepted data to.

Astra
Astra's picture
Offline
Newbie
Joined: 03/20/2009
Year of mobile attack: And the winner is 2009!

LOL'd @ this story - i think the best way to describe this premature WAP push release is "a total cluster-f*ck !" Keep up the good work Pat.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.