50 million Android Phones vulnerable to Heartbleed , Data shows

Atleast four million android phones from U.S and tens of millions of android phones from world wide are vulnerable to the security flaw named "Heartbleed" which is now over-populated.

According to Google's announcement, Every device which is running android "Jelly Bean" software which means Android 4.1.1 released in 2012 is vulnerable.

Using data provided by the firm Chitika , It is the first time when an accurate estimate has been done on vulnerable devices. The android devices which are running Android 4.1 or 4.2 are not at risk.

Google has not provided the number of vulnerable android devices but they have indicated that the figure is less than 10% of world wide activated devices. It could be huge number as Google have activated about 900 million devices running with Google services world wide,  and there are hundreds of devices in China without Google services which is not shown in Google's system , that devices in China might be running vulnerable version.

"More than 80% of the people running Android 4.1 which have shared its data without looking are all affected," Marc Rogers, principal security researcher at the San Francisco-based company told.

Google released the first version of Android 4.1.1 in July 2012 which brought a bug fix for Nexus 7 tablets.

Only the version 4.1.1 uses the vulnerable version of OpenSSL as Google noticed it on a blog which was discussing the bugs affecting on Google products.

Continue reading →

'CoinKrypt' Malware Uses Google Android Phones to Mine Virtual Currency

Hackers are no longer behind your data. Now they are interested in your phone. Yes this is increasing becoming global phenomena where hackers are developing malware to damage your phone and earn virtual currency known as bitcoin. Phone Mining is a terms use to describe the way in which hackers can use your phone to generate virtual currency.
 These malware are embedded in different android apps and are usually uploaded on Google store. A user download an app thinking of it to be game, or whatever he wants. Yet in truth it is a malware that will install it self on ur device and then use it to mine digital money. Just recently, researchers at Trend Micro noted the appearance of Google Android malware as repacked copies of popular apps such as Football Manager Handheld and TuneInvRadio that is involved in mining digital money. 
The apps were injected with the CPU mining code from a legitimate Android cryptocurrency mining app that is based on the well- known cpuminer software.

Recently CoinKrypt malware is being spread across the online forum which is believed to the most effective mining malware. 
This fairly simple software has the ability to mine targets as Litecoin, Dogecoin and Casinocoin while ignoring Bitcoin because of the relative difficulty in mining it.

 Lookout principal security researcher Marc Rogers told Security Week that software can not only use your packet data but it can also damage or burn your hardware. As it sets the infected phone to mine for currency by downloading and generating Gigabytes of hashes. 
Which will heat up your phone incredibly and will damage your phone's battery and power supply. "Users with phones and tablets that are suddenly charging slowly, running hot, or quickly running out of batteries may want to consider if they have been exposed to this or similar threats," blogged Trend Micro Mobile Threats Analyst Veo Zhang. "Also, just because an app has been downloaded from an app store – even Google Play – does not mean it is safe".

Continue reading →

'CoinKrypt' Malware Uses Google Android Phones to Mine Virtual Currency

Hackers are no longer behind your data. Now they are interested in your phone. Yes this is increasing becoming global phenomena where hackers are developing malware to damage your phone and earn virtual currency known as bitcoin. Phone Mining is a terms use to describe the way in which hackers can use your phone to generate virtual currency.
 These malware are embedded in different android apps and are usually uploaded on Google store. A user download an app thinking of it to be game, or whatever he wants. Yet in truth it is a malware that will install it self on ur device and then use it to mine digital money. Just recently, researchers at Trend Micro noted the appearance of Google Android malware as repacked copies of popular apps such as Football Manager Handheld and TuneInvRadio that is involved in mining digital money. 
The apps were injected with the CPU mining code from a legitimate Android cryptocurrency mining app that is based on the well- known cpuminer software.

Recently CoinKrypt malware is being spread across the online forum which is believed to the most effective mining malware. 
This fairly simple software has the ability to mine targets as Litecoin, Dogecoin and Casinocoin while ignoring Bitcoin because of the relative difficulty in mining it.

 Lookout principal security researcher Marc Rogers told Security Week that software can not only use your packet data but it can also damage or burn your hardware. As it sets the infected phone to mine for currency by downloading and generating Gigabytes of hashes. 
Which will heat up your phone incredibly and will damage your phone's battery and power supply. "Users with phones and tablets that are suddenly charging slowly, running hot, or quickly running out of batteries may want to consider if they have been exposed to this or similar threats," blogged Trend Micro Mobile Threats Analyst Veo Zhang. "Also, just because an app has been downloaded from an app store – even Google Play – does not mean it is safe".

Continue reading →