BlackBerry a Juicy Hacker Target

Quote:

---

Jesse D'Aguanno, a consultant with Praetorian Global, has developed a hacking program that exploits the trust relationship between a BlackBerry and a company’s internal server to hijack a connection to the network. Because the data tunnel between the BlackBerry and the server is encrypted, intrusion detection systems at the perimeter of the network won't detect the attack.

The technique is successful, D'Aguanno says, because most companies aren't equipped to detect someone trying to deliver an exploit from inside the network. It also works because few companies view the BlackBerry as a plausible attack vector.

---

Full Story

Just something else for us all to worry about. :rolleyes:

Cheers:

This phone is impossible to hack, easily the most secure voice communication system ever invented.


http://amos.indiana.edu/library/scripts/phone.html


:D

We've already been in contact with RIM about this and it is pretty easily prevented. The other big error is that you cannot email this trojan. RIM says it has to be opened via the browser.

They recommend these two documents-
Protecting the BlackBerry Device Platform Against Malware

http://www.blackberry.com/knowledgec...nodeId=1266119

http://www.blackberry.com/security

I think the answer they sent back to us pretty quickly was a stock answer that they were putting on their mailing list as well. Some organizations may not be able to enforce a policy that restricts what a user can load. A lot of execs break the rules all of the time.

well exactly what is a Blackberry device?? Is it something sililar to GPRS service???

Blackberry

Cheers: