{"id":549848,"date":"2006-08-15T11:28:10","date_gmt":"2006-08-15T11:28:10","guid":{"rendered":"http:\/\/localhost:8888\/wordpress\/technology\/549848-blackberry-devices-gateways-for-computer-attacks.html"},"modified":"2006-08-15T11:28:10","modified_gmt":"2006-08-15T11:28:10","slug":"blackberry-devices-gateways-for-computer-attacks","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/technology\/549848-blackberry-devices-gateways-for-computer-attacks.html","title":{"rendered":"BlackBerry devices gateways for computer attacks"},"content":{"rendered":"

Jesse D’Aguanno of Praetorian Global made a "BlackBerry Attack Toolkit" demonstration available for download at the company’s website along with ‘BBProxy’ software that exploits the vulnerability. <\/font><\/p>\n

"The premise is the BlackBerry device that everyone carries around in their holsters is actually a computer constantly connected to your network," D’Aguanno said. <\/font><\/p>\n

"So, someone can take over the device, or load a virus on it covertly." <\/font><\/p>\n

D’Aguanno hid attacker software code in a tic-tac-toe game that, if downloaded and played on a BlackBerry, secretly invaded the network linked to the handled device. <\/font><\/p>\n

An "attack vector" described by D’Aguanno during a presentation at a recent DefCon hackers conference in Las Vegas was to e-mail BlackBerry users a link and trick them into downloading the malicious software cloaked in the game. <\/font><\/p>\n

The devices, made by Research In Motion in Canada, would then act as doorways that let hackers slip behind fire walls and seek out unprotected computers in a company’s network, according to D’Aguanno. <\/font><\/p>\n

"One of the biggest hurdles for an actual attacker is to get themselves on the internal network," D’Aguanno said. "Going head-on is usually not the smart way to go because of beefy fire walls and all that. <\/font><\/p>\n

"But, if you get yourself inside the network, there are vulnerable machines, the defenses aren’t as formidable because they rely on the outer walls." <\/font><\/p>\n

D’Aguanno said that the potential for the BBProxy version released on Monday to be used maliciously was "nil" and that it was intended to show network administrators that the threat of attack via BlackBerry devices was real. <\/font><\/p>\n

"The general thinking around the BlackBerry and handheld devices as a whole needs to be reformed," D’Aguanno said. "You need to secure the rest of your network from malicious attacks from that medium." <\/font><\/p>\n

Another possible form of attack was "blackjacking", or hijacking legitimate users’ BlackBerry devices and replacing them on the network with rogue devices, D’Aguanno said. <\/font><\/p>\n

The components of business enterprise computer servers that support mobile data devices should be isolated instead of being linked in ways that allow unfettered access to entire networks, he advised. <\/font><\/p>\n

Downloading of third-party applications to BlackBerry or similar devices should be prevented, according to D’Aguanno. "It is kind of a new playground, as far as a way into a network," D’Aguanno said, adding he knew of no successful hacker attacks via BlackBerry. <\/font><\/p>\n

"I have a BlackBerry. I think they are great things, but you have to treat them like any untrusted computer with access to your network." <\/font><\/p>\n

Inet-Bridge<\/font><\/i><\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

A California computer security specialist released software on Monday to show that hackers can attack networks through widely popular BlackBerry handheld devices. <\/p>\n","protected":false},"author":23,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[17],"tags":[],"class_list":["post-549848","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/549848"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=549848"}],"version-history":[{"count":0,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/549848\/revisions"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=549848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=549848"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=549848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}