Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Laptop to phone connection- malware transfer


  • Please log in to reply
16 replies to this topic

#1 resertedlab

resertedlab

  • Members
  • 143 posts
  • OFFLINE
  •  
  • Local time:10:21 AM

Posted 21 September 2016 - 07:25 PM

Is there an option for PC/laptop running Windows to set to transfer certain program/malware when you conect it through USB with phone on autorun?

 

I connected my android phone trhough charger's usb cable to my laptop (that i fear could be currently infected) and pop up showed up on my phone that said it would require to install software in order to be able to share between the devices, i accidently clicked yes. However, i read that that appears everytime you connect pc with android for the first time. My question is if my laptop was physically abused (people had access to it), can windows be set to automaticly transfer files to any connected phone through USB (like to install keyloger/other malware on default on my phone the moment i connect them? Any ideas?



BC AdBot (Login to Remove)

 


#2 Crazy Cat

Crazy Cat

  • Members
  • 808 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Lunatic Asylum
  • Local time:08:21 PM

Posted 21 September 2016 - 07:58 PM

If you bothered to research yourself before posting, you would have answered your own question.

Malware infects Android and Windows at the same time. https://blog.avast.com/2013/02/08/malware-infects-android-and-windows-at-the-same-time/

Can malware on my computer infect my phone? https://security.stackexchange.com/questions/22752/can-malware-on-my-computer-infect-my-phone

Some Windows computers are infecting Android devices with malware. http://betanews.com/2014/01/25/some-windows-computers-are-infecting-android-devices-with-malware/
 

Two things are infinite: the universe and human stupidity; and I'm not sure about the universe. ― Albert Einstein ― Insanity is doing the same thing, over and over again, but expecting different results.

 

InternetDefenseLeague-footer-badge.png


#3 resertedlab

resertedlab
  • Topic Starter

  • Members
  • 143 posts
  • OFFLINE
  •  
  • Local time:10:21 AM

Posted 21 September 2016 - 09:33 PM

Thanks cat, ive read the second one before posting, i know that most malwares are uncapable to infect both systems but still some can, but i also need to know can you set up you laptop to imidiatly send any program the moment you connect it with the adroid (sort of speak to use your laptop as autorunning flash, to set it manualy to install some program the moment the usb is connecteed with android for example) Will anything show up on the phone, like install pop up or something?

 

Also, is it normal when you connect your phone with you PC for the first time to ask you about premssion to install softoawre to be able to share files?  I've tested that and with different phones and 2 different laptops and eveytime on all devices it asked me to install such softoware (similary to when you plug new wireless moouse and it installs its drivers)

 

Will any of those malwares be detected by antivurs


Edited by resertedlab, 21 September 2016 - 09:36 PM.


#4 Crazy Cat

Crazy Cat

  • Members
  • 808 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Lunatic Asylum
  • Local time:08:21 PM

Posted 22 September 2016 - 11:09 PM

Yes, when you connect a Device TO Laptop using USB, it will detect the new device and install the drivers.

15 best antivirus Android apps and anti-malware Android apps. http://www.androidauthority.com/best-antivirus-android-apps-269696/
 

Two things are infinite: the universe and human stupidity; and I'm not sure about the universe. ― Albert Einstein ― Insanity is doing the same thing, over and over again, but expecting different results.

 

InternetDefenseLeague-footer-badge.png


#5 resertedlab

resertedlab
  • Topic Starter

  • Members
  • 143 posts
  • OFFLINE
  •  
  • Local time:10:21 AM

Posted 07 October 2016 - 12:06 PM

Thanks again cat, i need to ask you one more thing i hope can get what my question is"

 

Is it possible to program you laptop so anytime you usb connect with a phone the laptop to start installing on default some program you've set (not only malware but also legal programs), or you'll need to manualy drag/drop the program from your laptop to your android?

 

 

Here is my worry- i conected my android phone to a freind's laptop to exchange a few photos (we needed them for work), when i plugged the phone through usb carger cable it asked me (on my phone) if i want to install software to be able to share files and stuff like that and i fear i clicked yes accidently. I exchanged the photo from my phone to the laptop and imiddiatly in matter of seconds unplugged the phone. Then i checked with the AVG antivirus and nothing appeard wrong, Is it possible the laptop to have been set to install on default the moment it connects? Hope you got my point thanks again for the time, i am really paranoid about these things)


Edited by resertedlab, 07 October 2016 - 12:16 PM.


#6 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:21 AM

Posted 07 October 2016 - 02:15 PM

Yes, Windows can be programmed to launch a program each time a USD device is connected.

I developed a tool to do this: USBVirusScan https://blog.didierstevens.com/programs/usbvirusscan/


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#7 resertedlab

resertedlab
  • Topic Starter

  • Members
  • 143 posts
  • OFFLINE
  •  
  • Local time:10:21 AM

Posted 07 October 2016 - 04:02 PM

Good info Didier! Would it require this or any other specific program to be visably running on the Windows, or it could do it in secret. Also, when i have access to the laptop, is there a way to see if such launch programming is active and what programs are ordered to launch?



#8 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:21 AM

Posted 07 October 2016 - 04:11 PM

Are you asking just out of interest, or do you suspect someone compromised your laptop?


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#9 resertedlab

resertedlab
  • Topic Starter

  • Members
  • 143 posts
  • OFFLINE
  •  
  • Local time:10:21 AM

Posted 07 October 2016 - 04:46 PM

Yes i used to leave my laptop in shared aparment with people i dont trust at all anymore and althou it may be just paranoia i need to know how to determine if such things had happened. I know that it soounds suspicious for someone to ask os many similar questions but i need to be aware of such things since i store a lot of important information both on my laptop and phone. Thanks for the replies so far :) 



#10 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:21 AM

Posted 08 October 2016 - 04:48 AM

Then I suggest you read the pinned posts in forum "Am I infected? What do I do?" and post about your problem.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#11 resertedlab

resertedlab
  • Topic Starter

  • Members
  • 143 posts
  • OFFLINE
  •  
  • Local time:10:21 AM

Posted 08 October 2016 - 01:14 PM

Okey i will look around there :) However i belive there they mostly discuss internet thread/infections throu world wide web while i mostly concern about physical abuse of the machines (by someone who had access), since this way they can keep spying/controling even with legal programs- as long as a user like me isn't aware how these things work. I'll check around and ask if something comes to my mind. Cheers :)



#12 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:21 AM

Posted 08 October 2016 - 04:35 PM

You will be asked to run software that will report the status of your computer, like services. This report will also include legal programs.


Edited by Didier Stevens, 08 October 2016 - 04:35 PM.

Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#13 resertedlab

resertedlab
  • Topic Starter

  • Members
  • 143 posts
  • OFFLINE
  •  
  • Local time:10:21 AM

Posted 08 October 2016 - 06:27 PM

I did't know about that. definetly will try it. But i will be really thankfull if you tell me just how to check  if any app is programmed to be launched from my laptop the moment i connect it with androd (the thing we talked few comments back)- since you seem to be very aware of these things and i dont want to open a whole new thread specificly for that (I hope it's not that hard) I would assume it would be somewhere in the control panel. Again, when i connected the phone with the laptop i saw nothing exept a massege on the phone that asks me if i want to install softoware or something like that to be able to share photos ect between the machiens, but the same message shows when i connect my phone with other laptops as well, and as Cat said, its obviously something normal when you connect new device for first time, and i need to find out if, since you said its possible, the laptop is programmed to launch anything else when the connection happens. :):)


Edited by resertedlab, 08 October 2016 - 06:29 PM.


#14 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:21 AM

Posted 09 October 2016 - 04:52 AM

I would have told you if it was as simple as checking the control panel. But it is not.

 

Also, you no longer trust your computer and you think you smartphone is the target. But it could be something totally different.

So it's better to have it checked out.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#15 resertedlab

resertedlab
  • Topic Starter

  • Members
  • 143 posts
  • OFFLINE
  •  
  • Local time:10:21 AM

Posted 09 October 2016 - 11:43 AM

Yes, it's the computer which i mainly  dont trust since it's the only thing i've left unnatended.. The phone and other devices i just used to connect wth the laptop, but i can't belive they can get owned so easily. Ok, i belive thats enough of this thread for now :) But as a professional as you are, do you belive such hacking comnspiracy is even possible, or it's more like a theory? I personaly have never heard something like that to be pulled off- like remote controling and deep hidden infection which remains totaly undetected by me and my antiviruses (i've checked hundred times alreadt with many alware and antiviruses)

 

By the was i asked my question in the forum you suggested ;)


Edited by resertedlab, 09 October 2016 - 11:46 AM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users