<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The FORWARD project blog &#187; trojan</title>
	<atom:link href="http://blogs.ict-forward.eu/forward/tag/trojan/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.ict-forward.eu/forward</link>
	<description>blogging on emerging and future threats</description>
	<lastBuildDate>Mon, 30 Jan 2012 09:09:17 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1</generator>
		<item>
		<title>New Trojan affects Android devices</title>
		<link>http://blogs.ict-forward.eu/forward/new-trojan-affects-android-devices/</link>
		<comments>http://blogs.ict-forward.eu/forward/new-trojan-affects-android-devices/#comments</comments>
		<pubDate>Fri, 07 Jan 2011 19:06:13 +0000</pubDate>
		<dc:creator>tsikudis</dc:creator>
				<category><![CDATA[security news]]></category>
		<category><![CDATA[android]]></category>
		<category><![CDATA[Lookout]]></category>
		<category><![CDATA[mobile phones]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[smartphones]]></category>
		<category><![CDATA[trojan]]></category>

		<guid isPermaLink="false">http://blogs.ict-forward.eu/forward/?p=1186</guid>
		<description><![CDATA[A new sophisticated Android Trojan, dubbed &#8220;Geinimi&#8221;, emerged in China compromising devices, bundling with botnet-style functionality. The malware sends personal data of a user&#8217;s phone to a remote server and is also capable of receiving commands from, controlled by hackers, remote servers, in order to control the phone. Mobile security firm Lookout describes the malware [...]]]></description>
			<content:encoded><![CDATA[<p>A new sophisticated Android Trojan, dubbed &#8220;Geinimi&#8221;, emerged in China compromising devices, bundling with botnet-style functionality.</p>
<p>The malware sends personal data of a user&#8217;s phone to a remote server and is also capable of receiving commands from, controlled by hackers, remote servers, in order to control the phone. Mobile security firm <a href="https://www.mylookout.com/">Lookout</a> describes the malware as the most sophisticated to appear on Android devices wich has been uploaded onto third-party Chinese Android app markets, poses as gaming applications(Monkey Jump 2, Sex Positions, President vs. Aliens, City Defense, Baseball Superstars 2010).</p>
<p>When Geinimi is launched, collects significant information like location coordinates, unique identifiers for the device (IMEI) and SIM card (IMSI) and attempts to connect to a remote server to transmit the collected device information.</p>
<p>The security firm already updated both free and paid versions of its software to protect against Geinimi.</p>
<p>source:<a href="http://blog.mylookout.com/2010/12/geinimi_trojan/">http://blog.mylookout.com/2010/12/geinimi_trojan/</a></p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.ict-forward.eu/forward/new-trojan-affects-android-devices/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Malware threatens victims using copyright laws</title>
		<link>http://blogs.ict-forward.eu/forward/malware-threatens-victims-using-copyright-laws/</link>
		<comments>http://blogs.ict-forward.eu/forward/malware-threatens-victims-using-copyright-laws/#comments</comments>
		<pubDate>Mon, 19 Apr 2010 08:54:10 +0000</pubDate>
		<dc:creator>sebolani</dc:creator>
				<category><![CDATA[security news]]></category>
		<category><![CDATA[copyright]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[trojan]]></category>

		<guid isPermaLink="false">http://blogs.ict-forward.eu/forward/?p=758</guid>
		<description><![CDATA[A trojan ,which spreads itself through a peer to peer network called Winni, commonly used by Japanese people, is responsible for gathering personal data from the victims and publish them into the web, according to BBC&#8217;s artice. The Kenzero Trojan is included in a fake adult anime game which is shared through Winni P2P network. [...]]]></description>
			<content:encoded><![CDATA[<p>A trojan ,which spreads itself through a peer to peer network called Winni, commonly used by Japanese people, is responsible for gathering personal data from the victims and publish them into the web, according to BBC&#8217;s <a href="http://news.bbc.co.uk/2/hi/technology/8622665.stm">artice</a>.</p>
<p>The Kenzero Trojan is included in a fake adult anime game which is shared through Winni P2P network. When a victim downloads and executes the file, the malware scans victim&#8217;s computer for personal information, such us Computer name, browsing history, downloaded files, favourite pages, OS version and clipboard dump while it opens a registration installation window demanding personal information. After gathering all posible information, it publishes them on a public web page and sends an email from a company <em>&#8220;Romancing, Inc.&#8221;</em> which accuse victims for downloading copyrighted material. The mail includes a law threat to the victims to settle the copyright violation and offers to resolve it for a 1500 yen (~16$) fee. Also, as noted in Trend Micro&#8217;s Blog <a href="http://countermeasures.trendmicro.eu/japanese-porn-extortion/">article</a>, it also downloads ,in victim&#8217;s computer, 3 copyrighted MP3 files, possibly to extend the threat.</p>
<p>More than 1500 people reported that fell victims of the malware, according to local paper <a href="http://www.yomiuri.co.jp/net/security/goshinjyutsu/20100326-OYT8T00832.htm">Yomiuri Shimbun</a>, however its unknown how many payed the copyright infringement fee.</p>
<p>That&#8217;s the second similar issue this week as earlier was reported, <a href="http://ddanchev.blogspot.com/2010/04/copyright-violation-alert-themed.html">here</a>, a fake ICCP Foundation which demanded 400$ for copyright issues.</p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.ict-forward.eu/forward/malware-threatens-victims-using-copyright-laws/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

