With 6.1 trillion text messages sent in 2010 alone, short message service (SMS) is still one of the most popular mobile communication services. Due to its continuing popularity, SMS technology is nowadays used in various fields of application. This also includes security-sensitive fields such as e-banking, or e-government. In these fields, SMS technology is for instance employed to authorize financial transactions or the creation of qualified electronic signatures. Modern smartphone platforms such as Google Android provide application developers with the means to include SMS functionality. This can be beneficial in most cases but also facilitates the implementation of malware that is able to send and receive SMS messages unnoticed by the legitimate end user. In this context, SMS sniffers and SMS catchers have recently attracted attention. This kind of malware intercepts incoming SMS messages either to spy on security-sensitive data transmitted via SMS or to receive SMS-based malware control commands. For security-sensitive SMS-based applications, SMS catchers pose a serious threat. A recent attack on SMS-based e-banking systems has employed SMS catchers on smartphones to steal 36.000.000 Euro from corporate and private bank accounts in Europe. Unfortunately, security software for smartphones is still in the fledging stages and current solutions are not able to reliably detect SMS catchers. To overcome this problem, we introduce different methods to detect SMS sniffers and SMS catchers on smartphones. We discuss benefits and limitations of the proposed methods and show how these methods can be assembled to a comprehensive detection workflow for SMS-based malware. By providing means to detect SMS catchers and sniffers on smartphones, our work contributes to the security of current and future SMS-based applications.
[1]
Giacomo Fiumara,et al.
A visual tool for forensic analysis of mobile phone traffic
,
2010,
MiFor '10.
[2]
Alastair R. Beresford,et al.
MockDroid: trading privacy for application functionality on smartphones
,
2011,
HotMobile '11.
[3]
Yajin Zhou,et al.
Dissecting Android Malware: Characterization and Evolution
,
2012,
2012 IEEE Symposium on Security and Privacy.
[4]
Sahin Albayrak,et al.
Smartphone malware evolution revisited: Android next target?
,
2009,
2009 4th International Conference on Malicious and Unwanted Software (MALWARE).
[5]
Byung-Gon Chun,et al.
TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones
,
2010,
OSDI.
[6]
Clemens Orthacker,et al.
Qualified Mobile Server Signature
,
2010,
SEC.
[7]
Stefan Kraxberger,et al.
Malware detection by applying knowledge discovery processes to application metadata on the Android Market (Google Play)
,
2016,
Secur. Commun. Networks.
[8]
Christopher Krügel,et al.
PiOS: Detecting Privacy Leaks in iOS Applications
,
2011,
NDSS.
[9]
Jeffrey S. Foster,et al.
SymDroid: Symbolic Execution for Dalvik Bytecode
,
2012
.