BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 07-09-2009, 07:06 PM   #21 (permalink)
New Member
 
Join Date: Jul 2009
Model: bold
PIN: N/A
Carrier: ATT
Posts: 10
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Please Login to Remove!

True ! none of those affect the blackberry OS. But they do affect the blackberry in general because they affect applications that run run on it. If you use you bb for email and the email app is unusable, then your bb is partially affected. If you then get a browser trojan, then you can no longer browse the web with your bb, hence your bb /system/ is partially affected. If your java gets corrupted then potentially all applications on your bb are affected.

Here is a snippet of the trojan link from blackberry own site....
"There is a Trojan horse program called J2ME/RedBrowser.a that affects the BlackBerry Browser. It pretends to access Wireless Application Protocol (WAP) web pages via short message service (SMS) messages. In reality, instead of retrieving WAP pages, it sends SMS messages to premium rate numbers; thus, increasing the user?s phone bill.

True that not a vulnerability of the OS, but it would cause me to turn the bb /off/ until I could get a replacement, or get it fixed, if its fixable....
Offline  
Old 07-09-2009, 07:21 PM   #22 (permalink)
New Member
 
Join Date: Jul 2009
Model: bold
PIN: N/A
Carrier: ATT
Posts: 10
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Recommended reading. "Protecting the BlackBerry device platform against malware" white paper
<http> <www> .blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/7979/1181821/828044/1181292/Protecting_the_BlackBerry_device_platform_against_ malware.pdf?nodeid=1266119&vernum=0
Offline  
Old 07-09-2009, 07:36 PM   #23 (permalink)
BBF Spam Killer Moderator
 
daphne's Avatar
 
Join Date: May 2007
Location: on a sunny beach
Model: Z30
OS: 10.2.1.12
PIN: X1ZPY34K
Carrier: VZW
Posts: 9,169
Post Thanks: 122
Thanked 146 Times in 116 Posts
Default

For the J2ME/RedBrowser.a to work, the user would have to install it and allow it to run.

BlackBerry Advisory - J2ME/RedBrowser.a

Quote:
A user must choose to download this program through their BlackBerry browser. The program purposes to allow for WAP browsing via SMS. In fact it tries to send SMS messages to premium numbers.

Note that on the BlackBerry the user will be prompted when the program attempts to send an SMS message and the user must authorize the transaction.

Knowledge Base article KB-04916 http://www.blackberry.com/knowledgec...nodeId=1199859

The McAfee advisory link:
J2ME/RedBrowser.a

This is NOT a BlackBerry vulnerability. The user must choose to download this un-trusted application and then must authorize the SMS connections that it attempts to make. The KB article discusses this and addresses some general mitigation strategies for an administrator.
The McAfee link says its a "proof of concept" trojan, meaning not used, but designed for testing.

Also
Quote:
Method of Infection -

This malware requires that the user intentionally install it upon the device. As always, users should never install unknown or un-trusted software. This is especially true for illegal software, such as cracked applicationsxxx8212;they are a favorite vector for malware infection.
A BES administrator could easily block and remove this.
__________________
Report spam text messages to 7726
#BlackBerry by choice #BlacBerry 10 is here!

Last edited by daphne : 07-09-2009 at 07:38 PM.
Offline  
Old 07-09-2009, 10:47 PM   #24 (permalink)
Talking BlackBerry Encyclopedia
 
Damaged7's Avatar
 
Join Date: Dec 2008
Model: 9810
OS: 7.0
PIN: N/A
Carrier: Rogers
Posts: 316
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default

Wirelessly posted (Bold 9000)

If there isn't, its certanly possible I would think

Look at quickpull. That program has access to turn off your BB. Whose to say someone couldn't do the same, but make it reboot constantly as soon as the BB loads up.
Offline  
Old 07-09-2009, 11:11 PM   #25 (permalink)
BlackBerry God
 
penguin3107's Avatar
 
Join Date: Jan 2005
Model: iOS 5
Carrier: VZW
Posts: 11,701
Post Thanks: 1
Thanked 237 Times in 219 Posts
Default

Quote:
Originally Posted by Damaged7 View Post
Wirelessly posted (Bold 9000)

If there isn't, its certanly possible I would think

Look at quickpull. That program has access to turn off your BB. Whose to say someone couldn't do the same, but make it reboot constantly as soon as the BB loads up.
Quickpull doesn't install itself.
__________________
BCSA
BES 5.0.3 MR4 :-: Exchange 2007 SP3 RU3
http://port3101.org
Offline  
Old 07-10-2009, 06:17 PM   #26 (permalink)
Talking BlackBerry Encyclopedia
 
Damaged7's Avatar
 
Join Date: Dec 2008
Model: 9810
OS: 7.0
PIN: N/A
Carrier: Rogers
Posts: 316
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default

Wirelessly posted (Bold 9000)

No it doesn't. But someone could label that program as a "file manager" or a "e-book reader" or anything. They wouldn't advertise that it will mess up your BB.

They would probably disguise the program as something you would want to install.
Offline  
Old 07-11-2009, 09:36 AM   #27 (permalink)
BlackBerry Extraordinaire
 
TXLady's Avatar
 
Join Date: Mar 2007
Location: San Antonio, TX
Model: 9650
Carrier: Sprint
Posts: 1,067
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default

I guess users who will install any software without worrying about whether it is from a reliable source may need to worry about installing something which might infect their computer. Users who practice good security practices (don't install stuff if you can't verify the originator, etc., same as you do on your computer) probably don't need to worry about it. I don't need to install every piece of software out there and won't install anything that isn't from a reliable source so I'm not worried.
__________________
Personal: iPhone on AT&T
Work: BB 9650 on Sprint
Offline  
Old 08-04-2009, 01:42 PM   #28 (permalink)
New Member
 
Join Date: Jan 2008
Model: 9630
PIN: N/A
Carrier: Sprint
Posts: 2
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

In a related vein...does anyone know whether themes from rogersmj.com are safe? How can we determine whether these and other pieces of code are legit and not trojans or other types of malware before we install them?

Thnx!
Offline  
Old 08-04-2009, 08:05 PM   #29 (permalink)
BlackBerryForums.com Super Moderator
 
SteveO86's Avatar
 
Join Date: Sep 2007
Location: Florida
Model: 9650
OS: 6.0.0.280
PIN: I heard it drop!
Carrier: VZW BIS
Posts: 6,534
Post Thanks: 0
Thanked 4 Times in 1 Post
Default

If you install a Theme that was not made for your specific OS/Device it could brick your device.

Themes really aren't malicious, although I am not sure if they could be.

The 9630 has NO third party themes out there, so I would not install any.
__________________
8830 -> 8330 -> 9550 -> 9650
Just think about how far BlackBerries have come from then till now... And what else is coming.

Follow me on Twitter
Offline  
Old 08-11-2009, 08:19 AM   #30 (permalink)
New Member
 
Join Date: Aug 2009
Model: 8800
PIN: N/A
Carrier: na
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

somebody knows how to detect malware application via our application without BES.
Offline  
Old 08-12-2009, 07:10 PM   #31 (permalink)
BlackBerryForums.com Super Moderator
 
SteveO86's Avatar
 
Join Date: Sep 2007
Location: Florida
Model: 9650
OS: 6.0.0.280
PIN: I heard it drop!
Carrier: VZW BIS
Posts: 6,534
Post Thanks: 0
Thanked 4 Times in 1 Post
Default

Quote:
Originally Posted by pankaj.satwal View Post
somebody knows how to detect malware application via our application without BES.
? You might want to elaborate on that question a bit more.
__________________
8830 -> 8330 -> 9550 -> 9650
Just think about how far BlackBerries have come from then till now... And what else is coming.

Follow me on Twitter
Offline  
Old 08-29-2009, 02:47 AM   #32 (permalink)
Thumbs Must Hurt
 
dynamic121588's Avatar
 
Join Date: Aug 2008
Location: Pacoima,CA
Model: 8900
OS: 4.6.1.231
PIN: N/A
Carrier: T mobile
Posts: 86
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

i think that pankaj.satwal is trying to ask is there any app or way to use the phone to scan what we plan on Downloading for any type of problems??
__________________
The blacker the Berry the sweeter the juice (MOD IT!!!)

Magma Red Zx-10r
Offline  
Old 10-08-2009, 07:39 AM   #33 (permalink)
New Member
 
Join Date: Oct 2009
Model: 8330
PIN: N/A
Carrier: alltel
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

My blackberry has been sending a text to one friend repeatedly with nothing on it but jibberish. I have definitely not be sending them to him. Is it a virus/malware and how do I fix it?
Offline  
Old 11-06-2009, 04:11 AM   #34 (permalink)
Thumbs Must Hurt
 
Join Date: Sep 2009
Model: 8310
OS: 4.5.0.110
PIN: N/A
Carrier: T-Mobile
Posts: 138
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Nothing gets malware until someone writes it. Delivery methods have been known for years, just look at MS products and all the virus/malware issues going on there. As technology grows and becomes more and more part of our lives, it is silly and dangerous to repeat the mantra "<whatever> does not get virus'." That claim alone is enough to cause some people to try and *make* the virus for that software. Anything with a hierarchical OS can get infected. Even Unix/Linux, and all those claims of invulnerability, has, and will have virus/malware aimed at them. Not as much as MS products, but they exist.

Sorry, the thread that got me started was closed, so I ranted here.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.