Targeted Attacks, now using Android Malware.

In the past we have seen many targeted attacks on platforms line windows and Mac OS X. Now the cyber criminals who are making a targeted attack are using Android Malware. Generally in an email attachment we have seen that there is an infected doc, docx, xls, pdf file. But not there is an apk file (apk file is the extension of all Android apps)

March 24th, 2013, the e-mail account of a high-profile Tibetan activist was hacked and used to send spear phishing e-mails to their contact list. This is what the spear phishing e-mail looked like:

 

 

spear phishing email

 

The malicious APK is 334326 bytes file, MD5: 0b8806b38b52bebfe39ff585639e2ea2 and is detected by Kaspersky Lab products as “Backdoor.AndroidOS.Chuli.a”.

mal android

 

After you launch the Android app you will see.

 

launched mal app

 

The full text reads follows. Notice notice the use of the mistaken “Word” instead of “World”:

“On behalf of all at the Word Uyghur Congress (WUC), the Unrepresented Nations and Peoples Organization (UNPO) and the Society for Threatened Peoples (STP), Human Rights in China: Implications for East Turkestan, Tibet and Southern Mongolia

In what was an unprecedented coming-together of leading Uyghur, Mongolian, Tibetan and Chinese activists, as well as other leading international experts, we were greatly humbled by the great enthusiasm, contribution and desire from all in attendance to make this occasion something meaningful, the outcome of which produced some concrete, action-orientated solutions to our shared grievances. We are especially delighted about the platform and programme of work established in the declaration of the conference, upon which we sincerely hope will be built a strong and resolute working relationship on our shared goals for the future. With this in mind,we thoroughly look forward to working with you on these matters.

Dolkun lsa

Chairman of the Executive Committee

Word Uyghur Congress”

 

While the victim reads the message the malware collects the following informations:

  • Contacts (stored both on the phone and the SIM card).
  • Call logs.
  • SMS messages.
  • Geo-location.
  • Phone data (phone number, OS version, phone model, SDK version).

The data does not gets automatically uploaded to C&C server. The Trojan waits for incoming SMS messages (the “alarmReceiver.class”) and checks whether these messages contain one of the following commands: “sms”, “contact”, “location”, “other”. If one these commands is found, then the malware will encode the stolen data with Base64 and upload it to the command and control server. The C2 URL is:

hxxp://64.78.161.133/*victims”s_cell_phone_number*/process.php

 The remote C&C server is running a Windows Server 2003

remote C&C

 

It looks like the attacker speaks Chinese as the Windows Server is running in Chinese language.

HTC One Overview.

Recently I got a chance to get my hands on the yet to be released HTC One in an event hosted by HTC. I did not get a test device to bring home so I am unable to write a full review. But I will share whatever things I could test and whatever info I could gather from the event.

HTC One is a new Android phone which will be the successor of HTC One X+ and trust me the phone looks great! (yes better than HTC One X+ )

I know some readers of my blog are impatient so I am sharing the tech specs before I write anything more about the device.

Tech specs of HTC One

SIZE:

137.4 x 68.2 x 9.3mm

WEIGHT:

143 g

CPU:

Qualcomm® Snapdragon™ 600,quad-core 1.7 Ghz

SIM type:

microSIM

Operating System:

Android 4.1.2 with HTC Sense 6.0

Memory:

Total storage : 32GB/64GB, available capacity varies1

RAM : 2 GB DDR2

Supported Network :

HSPA/WCDMA:

  • Europe/Asia: 850/900/1900/2100 MHz

GSM/GPRS/EDGE:

  • 850/900/1800/1900 MHz

LTE:

  • EU: 800/1800/2600 MHz
  • US (AT&T): 700/850/AWS/1900 MHz
  • US (TMO): 700/AWS MHz
  • US (Sprint): 1900 MHz
  • Asia: 1800/2600 Mhz

Display:

 4.7 inch, Full HD 1080p, 468 PPI

 GPS:

Internal GPS antenna + GLONASS
Digital compass

Sensors:

Gyro sensor
Accelerometer
Proximity sensor
Ambient light sensor

Connectivity options:

  • 3.5 mm stereo audio jack
  • NFC capable3
  • Compliant with Bluetooth 4.0
  • Bluetooth 4.0 with aptX™ enabled
  • Wi-Fi®: IEEE 802.11 a/ac/b/g/n
  • DLNA® for wirelessly streaming media from the phone to a compatible TV or computer
  • Support consumer infrared remote control
  • micro-USB 2.0 (5-pin) port with mobile high-definition video link (MHL) for USB or HDMI connection

Audio:

HTC BoomSound™

  • Dual frontal stereo speakers with built-in amplifiers
  • Studio-quality sound with Beats Audio™
  • HDR Microphone
  • Sense Voice

Camera:

  • HTC UltraPixel Camera
  • BSI sensor, Pixel size 2.0 µm, Sensor size 1/3′
  • Dedicated HTC ImageChip™ 2
  • F2.0 aperture and 28 mm lens
  • Optical Image Stabilization (OIS)
  • Smart Flash: Five levels of flash automatically set by distance to subject
  • Front Camera: 2.1 MP, 880 wide angle lens with HDR capability
  • 1080p Full HD video recording for both front and back cameras
  • HDR Video
  • Continuous shooting and VideoPic
  • Slow motion video recording with variable speed playback
  • HTC Zoe™ with HTC Zoe™ Highlights and HTC Zoe™ Share
  • Retouch with Object Removal, Group Retouch, and Sequence Shot

Multimedia: 

Audio supported formats:

  • Playback: .aac, .amr, .ogg, .m4a, .mid, .mp3, .wav, .wma (Windows Media Audio 9)
  • Recording: .amr

Video supported formats:

  • Playback: .3gp, .3g2, .mp4, .wmv (Windows Media Video 9), .avi (MP4 ASP and MP3)
  • Recording: .mp4

Battery:

Embedded rechargeable Li-polymer battery

Capacity : 2300 mAh

AC adapter:

Voltage range/frequency: 100 ~ 240 V AC, 50/60 Hz

DC output: 5 V and 1 A

 

Read the tech specs ? Now see the first look of the real device.

HTC One
The HTC One
HTC One
HTC One
HTC One metal body.
HTC One metal body.
Shane with the HTC One
Shane Chiang (Senior Manager of Online Communications,Asia Pacific,HTC) posing with the HTC One , on my request.

 

The phone feels very premium with its brushed metal body and crystal clear display on a full 1080p screen which is both technically and visually better than the iPhone Retina Display.

The default browser is great as it score a good number in HTML5 test.

It score 430 in HTML5 Test.

HTML5 Test on HTC One Browser
HTML5 Test on HTC One Browser

HTC’s new BlinkFeed™ is a nice addition to replace your default Home Screen, it shows content from all the things you like in one place, it also allows you to view your social network feeds, you can also post updates right from the BlinkFeed without opening dedicated app of the social media. And you can customize what content it shows , it can also show your local contents. And while you are browsing through the BlinkFeed , you get a call, after you disconnect you will be in the same position in the BlinkFeed™.

BlinkFeed in action.
BlinkFeed in action.

The camera is superb as it can take non stop shots if you go on clicking the shutter button like there is no tomorrow, it will go on taking pictures without bothering you with message like “Capturing…” or “Saving…” like most phones do. Another nice addition to the camera features is HTC Zoe™  which automatically captures up to 20 photos and a 3-second video which makes the photos come alive.

RIP MegaPixel , Long live UltraPixel.

image courtesy HTC
UltraPixel image courtesy HTC
image courtesy HTC
image courtesy HTC

 

image courtesy HTC
image courtesy HTC

 

Image Stabilization
Image Stabilization image courtesy HTC

 

specs (1)Some interesting features I like about the camera of HTC One is the ability to remove unwanted objects from the pic, like when you taking a photo someone walks past your view. You can now remove that person from the pic with just few touches on the screen.

MWC 2013
MWC 2013

Conclusion, HTC One will be the premium segment phone, its build quality is top notch and is packed with everything (including Android Jelly Beans out of box) you want from a smartphone.

The device will be available in April 2013. (Price not yet disclosed)

 

HTC One Meet-Up in Kolkata.

Today I was invited to the HTC One Meet-Up by HTC in Kolkata, Hyatt Regency. If you have been already following my live blog, or even you have not followed it, here is the full details post of the event.

The event as mentioned before was held at a hotel in Kolkata, Hyatt Regency. The Android powered phone HTC One was unveiled today to us. The phone is not yet available in the market and it felt great to be the lucky few who got chance to touch and use the device which the rest of the world could not.

First when we entered the conference room we were greeted by the Senior Manager of Online Communications, Asia Pacific, Shane Chiang. The we interacted among ourselves while hey were getting ready for the presentation. Then the presentation begin, Justin from HTC came forward  and gave a wonderful presentation, going through the features and finally the demo of the phone. May be its because of the fact he previously worked in Apple he got this wonderful presentation skills from Steve Jobs’s Keynote. 🙂

Justine from HTC giving the presentation.

Justine from HTC
Justine from HTC giving presentation.

 

About mobile interface and Smartphone Evolution.

Mobile UI and Smartphone Evolution
Justine saying about mobile UI and smartphone evolution.

Connecting the HTC One to projector for demo.

Getting ready to show demo
Getting ready to show demo.

Going through demo.

Demo going good.
Demo going good.

BlinkFeed in action.

BlinkFeed in action.
BlinkFeed in action.

BlinkFeed has local content too.

Going through all the WOW features of HTC One
Going through all the WOW features of HTC One

Music Player of HTC One

Music Player of HTC One
Music Player of HTC One

HTC One music player can download artist picture and album art from internet.

Music player of HTC One
Music player of HTC One automatically adds up artist picture and album art.

Music player can also show you the lyrics of the song.

HTC One music player can also show you the lyrics.
HTC One music player can also show you the lyrics.

Its time that we test the devices.

Its time for us to have the devices to test.
Its time for us to have the devices to test.

Shane with HTC One

Shane with the HTC One
Shane posing with the HTC One , on my request.

The HTC One

HTC One
The HTC One
HTC One
HTC One

 

HTC One metal body.
HTC One metal body.

HTC One will release on April 2013

 

The details review of HTC One coming up in next blog post, stay tuned. (No i have not got a review unit)

And a Big Thank You to HTC for giving me a HTC Bluetooth Stereo Headphones BH S600

Gift from HTC
Gift from HTC

 

HTC One Meet-Up Kolkata (India) Live Blog.

Today there is a event hosted by HTC at Hyatt Regency Kolkata, I am very much thankful to HTC for sending me the invite for HTC One Meet-up.

I will be live blogging the event. And post event I will give a details write up about the HTC One phone (that’s if I get a chance to get my hands on the device, HTC are you listening) 🙂

17.30

Event ended. Thank You #HTC  Bye everyone 🙂

17.23

Got the Bluetooth headphone by HTC Thank You HTC I love you #HTC #HTCOne

17.22

Giving away gifts… I want one pls #HTC

17.16

Got hands on the device . HTC One looks great.

16.35

Will get the device in hand now 🙂 #HTCOne

16.16

Demo time.

16.14

Video promo of #HTCOne playing.

16.13

#HTCOne will be available in April 2013

16.13

#HTCOne has #Sense5  , a completely new engine.

16.11

#HTCOne available in White and Black.

16.11

Color looks good on screen from all angle.

16.10

#HTCOne screen has Full 1080p,4.7″ 468PPi better then iPhone Retina Display.

16.08

#HTCOne is 10% smaller then the previous #HTCOneX yet packs more.

16.06

The full metal body of #HTCOne is the result of a dedicated team that worked in it.

16.04

record better sound in ur videos with #HTCOne

16.02

#SenceVoice on #HTCOne after all phone is made for talking. gets your clear voice over call in noisy place.

16.00

Find lyrics, artist photo and album art automatically on #HTCOne

15.58

Dual front stereo speaker. #HTCOne

15.55

Over 100 upgrades in the camera of #HTCOne

15.55

RIP Megapixel, Long live #HTC UltraPixel Camera

15.54

MegaPixel does not make a better camera, true. I like #HTC thinks like I do.

15.53

#HTC said we ask the great question in the whole Asia. Good job India. 🙂

15.51

#HTCShare share photos online. Your friends can see it from phone or desktop.

15.50

Get perfect group shot.

15.47

Show photos with ur friends in a easy way, combine photos in 30 sec video with transition effects, music, etc automatically. #HTCZoe ##HTCOne

15.45

Pictures comes alive in #HTCOne with New Gallery Experience.

15.42

Now showing difference in photo quality between iPhone5 , Samsung Galaxy S3 and HTCOne

15.39

Net Generation Camera #HTCOne

15.36

#BlinkFeed is different from Flipboard and other apps. #HTC

15.35

#BlinkFeed will also has local contents, regional based.

15.35

#BlinkFeed lets you not only see news and articles from web or social updates. But also post in ur social netwrok like Facebook. #HTCOne

15.33

#BlinkFeed the #HTC new mobile interface.

15.31

Saying about how HTC innovates. User Interface on Smartphone , etc.

15.28

Justin saying about the product.

15.27

The event started.

15.17

The official news is it will “start in 5 mins” … lets home it starts.

15.16

Still not started it was supposed to start at 3PM…so the event organizers is not as fact as #HTC phones, i suppose.

15.09

Waiting….. #HTCOneMeetUp to start.

15.02

its 3:01PM still not started. Will keep you guys informed as soon as it starts.

15.00

Ok so its 3PM , the event is yet to start.

14.51

Ok, so its only 10 mins left by I am super excite. can’t wait.

14.49

The event will start at 3PM according to the official and the invite email.

14.47

I have reached the Hyatt for the HTC One Meet-up in Kolkata. Done with registration.The event is yet to start.