Veracodes spyware monkey steals the berries

[breiti]

WOW, I've just came across this blog post, which is spreading at an incredible rate on the net right now: Veracode has just demonstrated that there is no absolute security. With TXSBBSpy, written and released as source code (but not as an executable version) by Tyler Shields, a senior researcher at the Veracode Research Lab, it is possible to create BlackBerry spyware, that can steal information from your BlackBerry. In a demonstration a few days ago a single SMS made a berry remotely forward it's contact list to a predefined e-mail, or to e-mail any outgoing SMS message to this address as well, without the owner even taking notice of it. Although in theory the BlackBerry platform has quite a number of security mechanisms in place that could be used against these types of attacks, most users are not careful enough to set the options to limit what access to specific types of data a particular app can have. Scary, isn't it?!

• Discuss this in the BlackberryOS Forums

[Veracode]

[sunkast]

Does anyone have a copy of this image? I think Armin deleted everything in his PB.