Cross-platform Mobile Malware: Write Once, Run Everywhere
نویسندگان
چکیده
Every day, thousands of new mobile apps are published on mobile app stores including Google Play and iOS App Store. While many of them are native apps, others are cross-platform mobile apps or HTML-based hybrid apps developed using various cross-platform mobile development tools. Native apps for Android and iOS are usually written using Android SDK and XCode tools respectively, but malware authors have plenty of choices when it comes to writing or repacking mobile malware that targets multiple platforms. At SophosLabs, we have seen an increase in the number of malicious apps written with cross-platform development tools such as PhoneGap. These pieces of malware hide their malicious code in HTML fi les or specifi c containers loaded by cross-platform frameworks instead of the platform’s native binaries. Considering the platform-independent characteristics, it is possible to foresee that more mobile malware and PUA families will be released across different mobile platforms including Android, iOS and Windows Mobile. Many game apps have been developed with cross-platform tools such as Unity and Cocos2d. Each tool generates its own executable format that can be used to package hidden malicious payloads. As a result, security researchers will face greater challenges to analyse and detect these pieces of mobile malware. This paper will research the feasibility of new cross-platform mobile malware. We will also analyse the package structures of such malware, discuss the technical issues and fi nally suggest a solution to the problem.
منابع مشابه
POSTER: Cross-Platform Malware: Write Once, Infect Everywhere
In this ongoing work we perform the first systematic investigation of cross-platform (X-platform) malware. As a first step, this paper presents an exploration into existing X-platform malware families and X-platform vulnerabilities used to distribute them. Our exploration shows that Xplatform malware uses a wealth of methods to achieve portability. It also shows that exploits for X-platform vul...
متن کاملAn Adaptive Mobile Application Development Framework
Although wireless networks and mobile devices become popular these days, the diversity of mobile devices and unsteadiness of wireless networks still cause software development much trouble. Thus, when developing a mobile application, developers are forced to expose to these problems and to be familiar with these technologies and therefore it will spend a lot of time to write a mobile applicatio...
متن کاملJava in Ubicomp
This paper describes the use of Java language in embedded devices, such as handhelds, digital TV set-top boxes, and even smart cards. The variety of devices offering the Java platform has transformed the original Java mantra “write once, run anywhere” into “one size doesn’t fit all”.
متن کاملDynamic Application Configuration using Mobile Java Objects in a Next Generation Internet Environment: End-User, Developer, and Service Provider Perspectives
Application users are becoming more mobile, expecting instant connectivity using a diverse range of heterogeneous devices. Despite the supposed ‘write once run anywhere’ promise of languages such as Java, developers must contend with a variety of API’s such as J2EE, J2SE and J2ME. Application and Internet service providers are faced with increasing costs as developers look to thin client soluti...
متن کاملMachine Learning Meets iOS Malware: Identifying Malicious Applications on Apple Environment
The huge diffusion of the so-called smartphone devices is boosting the malware writer community to write more and more aggressive software targeting the mobile platforms. While scientific community has largely studied malware on Android platform, few attention is paid to iOS applications, probably to their closed-source nature. In this paper, in order to fill this gap, we propose a method to id...
متن کامل