Wednesday 14 February 2007

How to bug others via their mobile phone

Wow, a Germany company has managed to create a program that can turn any mobile phone into a bugging device. Flaws in the protocol of the service sms are being exploited to do so. The Trojan horse is called Rexspy.

Here's how it works. The spy only requires your mobile phone number and sends off an SMS to your mobile phone which never arrives in your inbox. You'll never hear a sound or see any indication that a virus has been installed on your phone.

As soon as Rexspy is secretly installed, the spy can listen to all your mobile phone conversations and read all your SMS text messages.

The company who has developed Rexspy also created a remedial program, which is a little odd I find, quite as if Kaspersky would create viruses just to prove the point for virus protection.

Whatever the reason for the company Securstar to create this Trojan, it has helped the FBI to capture two Mafiosis last year. It seems as if this exploit has been discovered by security services around the world already.

I don't know if it is possible to get hold of Rexspy, but what a tool that would be for those who believe that their partner is unfaithful. A new scope of terror that could be introduced into relationships.

These security flaws should be closed immediately by mobile phone manufacturers and service providers I feel.

A remedy for those who don't want anyone to read their SMS is the product Kryptext which is available from Handango. It works only on Symbian phones. Go to Handango and check out if this type of protection works on your phone.
Just click on
http://www.handango.com/PlatformProductDetail.jsp?siteId=1&platformId=4&N=7%2095636&productId=141685&R=141685

I don't know what to do about protecting phone calls yet, but stay tuned

No comments: