Smartphone Ownage: The State of Mobile Botnets and Rootkits

Presented at The Next HOPE (2010), July 17, 2010, 5 p.m. (60 minutes)

Symbian Botnet? Mobile Linux Rootkits? iPhone Botnets? Millions of phones at risk? The press coverage on smart phone threats is at times somewhat accurate, distant, and occasionally (if unintentionally) misleading. They tend to raise questions such as: How close to PC levels (100,000+ to millions of nodes) have mobile botnets reached? Have mobile rootkits reached the complexity of those on the PC? This talk will cover the state of rootkits and botnets on smart phones from the perspective of anti-malware researchers, including demystification of the threat from mobile rootkits and mobile botnets, the differences (if any) between mobile rootkits and mobile botnets vs. their PC counterparts, and a look at how samples seen in the wild and researcher PoCs function.

Presenters:

• Jimmy Shah
  Jimmy Shah is a mobile anti-virus researcher for McAfee, specializing in analysis of mobile threats on existing platforms (J2ME, SymbOS, Windows Mobile, iPhone OS, Android) and potential mobile malware and spyware. He works with a team of researchers that regularly provides analysis and research on mobile threats to McAfee clients.

Links:

• https://infocon.org/cons/2600/The Next Hope (2010)/The Next HOPE (2010) - Smartphone Ownage - The State of Mobile Botnets and Rootkits.srt (subtitles)
• https://infocon.org/cons/2600/The Next Hope (2010)/The Next HOPE (2010) - Smartphone Ownage - The State of Mobile Botnets and Rootkits.mp4
• https://www.youtube.com/watch?v=bBWcSQwqBaY

Similar Presentations:

• DEF CON 17 (2009) / Is your Iphone Pwned? Auditing, Attacking and Defending Mobile Devices
• ToorCon San Diego 12 (2010) / Smartphone Ownage: The State of Mobile Botnets and Rootkits
• DEF CON 20 (2012) / Botnets Die Hard - Owned and Operated