Middle East Mobile Carrier Etisalat ‘Update’ Spies; Blackberry & iPhone Vulnerable

Etisalat's 'update' application for Blackberry peeks at private information on your phone.

On July 8th, 2009, United Arab Emirates carrier Etisalat sent a text message to Blackberry users requesting them to download an update for their cell phones. They had no idea that the application being installed had also, according to RIM, a program which allowed third party companies to look at users personal information. Etisalat stated that the upgrade was a required “service enhancement’.

Rim on the other hand mentioned in a statement that “independent sources have concluded that it is possible that the installed software could enable unauthorized access to private or confidential information stored on the user’s smart phone.”

“When no one was paying attention, their phones turned into a computer. These phones have bugs in them and bad guys can take advantage of them and you have to be aware there is a risk here.” cyber security expert Charlie Miller.

Last months Las Vegas Black Hat information security conference, Miller and fellow computer security researcher Collin Mulliner demonstrated and shocked attendees when they revealed how some simple text messages can allow someone to hijack Apple’s iPhone, as well as several other handsets, with neither the handset’s owner or network provider ever knowing what transpired.

“The virus allows outsiders to send text messages, access web sites, make phone calls as well as turn on a device’s camera and microphone,” Miller explained.

“Anything you could do with your phone I could do,” said Miller. “And you could be staring at your phone the whole time and nothing happens. It is pretty dangerous.”

24  hours after Miller’s demonstration, Apple issued a patch to fix the vulnerability on the iPhone. Engadget reported RIM fixed the problem, for now.

Early in July, a cell phone worm named “Sexy Space” hit mobile phones via the Symbian operating system software. This exploit allowed hackers to steal the phone and network information from handsets by inviting in victims using a web site that promised Porn.

With this type of activity on cell phones, it would be wise not to visit unknown sites that have the ability to use an exploit and gain access to your device. With thousands of applications already out on iPhone and thousands more coming to Palm’s Pre, Blackberry, WinMo, Symbian and Android, cell phone makers, carriers and app developers need to take in consideration the serious issue of their devices and applications allowing exploits to expose users personal data. Millions of cell phones are filled with personal information like the new USAA iPhone application that allows you to deposit your check into you bank account and victims personal information could be left out there in open for a hackers delight.