‘Curse Of Silence’ SMS S60 Exploit

F-Secure je na 25. Chaos Communication Congress-u u Berlinu demonstrirao ‘Curse of Silence‘ exploit koji navodno napada S60 2nd Edition telefone, kao i S60 3rd Edition i 3rd Edition FP1 telefone. Feature Pack 2 i S60 5th Edition telefoni su "otporni" na ovaj malware. Ovaj exploit će vam onemogućiti sve Messaging sposobnosti (primanje i slanje SMSova i MMSova) na vašem telefonu, pod uslovom da on primi specijalno formatiranu SMS poruku.

"Napad" se ne postiže niti aplikacijom niti putem Bluetootha, već isključivo slanjem specijalno formatirane SMS poruke. Na Nokiji N95 bilo je potrebno poslati par takvih SMS poruka, dok se ne dostigne kritična granica, kada će telefon ispisati poruku "Not enough memory to receive message(s). Delete some data first.", a u uglu će treperiti SMS koverta.

Nakon toga, više nećete biti u stanju da koristite Messaging aplikaciju, čak ni brisanje svih postojećih poruka ne pomaže (poruke kojim je izvršen napad se ne vide u Inboxu). Jedini lek je hard reset. Međutim! Za divno čudo F-Secure je već izdao "lek", za "samo" 57$, i licencom koja se mora obnavljati godišnje. Zanimljivo...

Nema previše razloga za brigu, pošto da biste bili zaraženi, napadač mora: 1) da zna kako se piše ta poruka; 2) da zna vaš broj telefona, 3) da vam pošalje više takvih poruka. Veće su šanse da će vam telefon pasti u bunar nego da završite "zaraženi".

Evo i video snimka kako sve to izgleda:



Da napomenem, ovo je prvi slučaj malware-a za S60v3 platformu. Usled novog sistema zaštite, uvedenog u Symbian-u 9, ne postoji još uvek nijedan virus za novu platformu, ali kompanije koje proizvode antiviruse su sklone lažnim uzbunama, kako bi ljudi osetili potrebu da kupe njihove proizvode .


Izvor: Mobilize.rs

Rado bih vam napisao celo uputstvo na srpskom ali kada moderatori prenose na engleskom zašto bih ja uradio suprotno. Dovoljno vam je i ovo da nekome zagorčate život u novogodišnjoj noći.

Napad sa daljine bi glasio naziv ove teme

Summary
=======

Emails can be sent via SMS by setting the messages Protocol Identifier
to "Internet Electronic Mail" and formatting the message like this:

<email-address><space><message body>

If such messages contain an <email-address> with more than 32
characters, S60 2.6, 2.8, 3.0 and 3.1 devices are not able to receive
other SMS or MMS messages anymore. 2.6 and 3.0 devices lock up after
only one message, 2.8 and 3.1 devices after 11 messages.


Details
=======

3GPP TS 23.040 specifies a method for sending emails via SMS in
section 3.8 ("SMS and Internet Electronic Mail interworking"). In its
most basic form, such a SMS message starts with the from- (MT-SMS) or
to-email-address (MO-SMS), followed by a space character, and then the
message body. The TP-Procotol-Identifier of the SMS message has to be
set to "Internet Electronic Mail" (value: 50 / 0x32).

It is not specified how such a message should be displayed when
received by the phone. Before S60 2.6, Series60 devices displayed such
messages exactly as they were sent. Starting with S60 2.6, when the
part of the message that should contain the from-address looks
anything like an email address (i.e. it contains an "@" somewhere),
this address is then displayed as the message sender instead of the
usually shown TP-Originating-Address.

If this email address is longer than 32 characters, Series60 2.6, 2.8,
3.0 and 3.1 devices fail to display the message or give any indication
on the user interface that such a message has been received. They do,
however, signal to the SMSC that they received the message by sending
an RP-ACK.

Devices running S60 2.6 or 3.0 will not be able to receive any other
SMS message after that. The user interface does not give any
indication of this situation. The only action to remedy this situation
seems to be a Factory Reset of the device (by entering "*#7370#").


Video uputstvo skinuti: https://berlin.ccc.de/~tobias/cos/s60-curse-of-silence-demo.avi