Lompat ke isi

Shedun

Ensiklopedia Pengetahuan Universitas Islam Sultan Agung

Shedun adalah nama dari keluarga virus ponsel (dikenal juga dengan Kemoge, Shiftybug, dan Shuanet[1][2][3]) yang menyasar sistem berbasis Android. Aksi Shedun terungkap pada 2015 oleh perusahaan keamanan ponsel Lookout, dan diperkirakan menginfeksi 20.000[4] aplikasi populer Android.[5][6][7][8][9][10]

Avira Protection Labs menyatakan bahwa keluarga Shedun menginfeksi 1.500-20.000 ponsel per hari.[11] Semua varian dari keluarga Sheldun memiliki kesamaan kode sumber sekitar 80%.[12][13]

Aksi Shedun dimulai dengan "membungkus kembali" aplikasi Android asli (seperti Facebook, Twitter, WhatsApp, Candy Crush, Google Now, dan Snapchat[14])[15][16][17] dengan ditambah adware, kemudian diedarkan melalui situs unduhan aplikasi pihak ketiga.[18] Ketika diunduh dan dipasang oleh korbannya, aplikasi-aplikasi tersebut tetap berjalan seperti biasa, tetapi korban mengeluhkan munculnya iklan mengganggu (laba dari iklan tersebut mencapai $2 per pemasangan[19]). Malware ini bercokol sedemikian kuat, hingga jalan satu-satunya adalah me-root ponsel korban dan memasang kembali ROM pabrik.[20][21][22]

Malware ini terdeteksi pada 26 tipe[23] perangkat keras berbasis Android baru yang dibuat di Tiongkok, seperti ponsel pintar dan tablet.[24][25][26][27][28][29][30][31][32][33][34][35][36][37][38]

Keluarga malware ini juga diketahui memiliki kemampuan auto-root [39][40] menggunakan celah keamanan seperti ExynosAbuse, Memexploit, dan Framaroot [41] dan memasang dirinya sendiri sebagai aplikasi sistem dan membuat salinan dirinya di partisi sistem, sehingga "setel ulang ke pabrikan" tidak dapat mengatasi malware ini.[42][43]

Keluarga malware ini sering kali memasang aplikasi adware lain tanpa seizin korbannya,[44] sehingga diklasifikasikan sebagai "adware agresif" karena sering memasang "aplikasi yang tak diinginkan"[45][46][47] sekaligus membombardir ponsel korban dengan iklan.[48]

Referensi

  1. ↑ by @HackTheW0r1d. Shuanet, ShiftyBug and Shedun malware could auto-root your Android – HackBails. Hackbails.wordpress.com. 2015-11-05.
  2. ↑ Android Adware Abuses Accessibility Service to Install Apps. SecurityWeek.com.
  3. ↑ Manish Singh. New Android Adware Can Download, Install Apps Without Permission: Report. NDTV Gadgets360.com.
  4. ↑ Three new malware strains infect 20k apps, impossible to wipe, only affect Android. AppleInsider Forums.
  5. ↑ Manish Singh. New Android Adware Can Download, Install Apps Without Permission: Report. NDTV Gadgets360.com.
  6. ↑ Hackers reveal Android trojan malware that is IMPOSSIBLE to remove. Mail Online. 5 November 2015.
  7. ↑ Daniel Eran. Three new malware strains infect 20k apps, impossible to wipe, only affect Android. Appleinsider.com. 2015-11-05.
  8. ↑ Android Malware On The Loose: Shuanet, ShiftyBug And Shedun Signatures Found On 20,000 Apps Outside Google Play Store. Droid Report.
  9. ↑ Shedun Trojan goes solo. Darkmatters.
  10. ↑ Popular Mobile Apps Repackaged with Trojans. Lavasoft. 2015-11-04.
  11. ↑ Shedun: adware/malware family threatening your Android device. Avira Blog.
  12. ↑ Neue Welle von Android-Malware lässt sich kaum mehr entfernen. Elektronikpraxis.vogel.de.
  13. ↑ PMK Presse, Messe & Kongresse Verlags GmbH. Gemeinsamkeiten: Shuanet, Shedun & ShiftyBug. Itseccity.de.
  14. ↑ Android-Malware: Adware war gestern. Android-Trojaner auf dem Vormarsch. botfrei Blog.
  15. ↑ Three new malware strains infect 20k apps, impossible to wipe, only affect Android. AppleInsider Forums.
  16. ↑ New type of auto-rooting Android adware is nearly impossible to remove. Ars Technica.
  17. ↑ Michael Mimoso. Shuanet Adware Roots Android Devices - Threatpost - The first stop for security news. Threatpost - The first stop for security news.
  18. ↑ Adware Shedun nistet sich gegen den Willen der Nutzer in Android ein. ITespresso.de.
  19. ↑ Michael Mimoso. Shuanet Adware Roots Android Devices - Threatpost - The first stop for security news. Threatpost - The first stop for security news.
  20. ↑ Hackers reveal Android trojan malware that is IMPOSSIBLE to remove. Mail Online. 5 November 2015.
  21. ↑ Android Trojan Software Morphs Into Real Apps, Nearly Impossible To Remove From Device’s System: Report. Yibada.
  22. ↑ Android-Malware: Neue Schadsoftware rootet Geräte und ist kaum zu entfernen - Golem.de.
  23. ↑ Swati Khandelwal. 26 Android Phone Models Shipped with Pre-Installed Spyware. The Hacker News. 3 September 2015.
  24. ↑ G Data : Mobile Malware Report. Public.gdatasoftware.com.
  25. ↑ Catalin Cimpanu. 24 Chinese Android Smartphone Models Come with Pre-Installed Malware. softpedia. 4 September 2015.
  26. ↑ David Gilbert. Amazon Selling $40 Android Tablets That Come With Pre-Installed Malware. International Business Times.
  27. ↑ Chinese smartphones infected with pre-installed malwareSecurity Affairs. Security Affairs.
  28. ↑ Chinese Android smartphones now shipping with pre-installed malware. SC Magazine.
  29. ↑ Diane Samson. Malware Found Pre-Installed on Xiaomi, Huawei, Lenovo Phones. iDigitalTimes.com.
  30. ↑ Amazon’s $40 Chinese Android Tablets Infected With Pre-Installed Malware. Design & Trend.
  31. ↑ Jeremy Kirk. Pre-installed malware found on new Android phones. Computerworld. 5 March 2014.
  32. ↑ G Data : Mobile Malware Report. Public.gdatasoftware.com.
  33. ↑ Waqas. Amazon Store, a safe haven for Android Tablets with pre-installed malware. HackRead.
  34. ↑ Pre-Installed Android Malware Raises Security Risks in Supply Chain. Juli 2022.
  35. ↑ Some Android Phones Come With Malware Pre-Installed: Report. The Huffington Post.
  36. ↑ Brand New Android Smartphones Coming with Spyware and Malware. WCCFtech.
  37. ↑ Chinese Android smartphone comes with malware pre-installed. Graham Cluley.
  38. ↑ Martin Brinkmann. Beware, your Android phone might come with preloaded spyware. gHacks Technology News. 8 September 2015.
  39. ↑ New type of auto-rooting Android adware is nearly impossible to remove. Ars Technica.
  40. ↑ Trojan adware on Android can give itself root access. The Tech Report.
  41. ↑ Shedun, Shuanet und Shiftybug: Android-Smartphone vor Malware schützen.
  42. ↑ Android's accessibility service grants god-mode p0wn power.
  43. ↑ Trojanized adware family abuses accessibility service to install whatever apps it wants | Lookout Blog. Blog.lookout.com. 2015-11-19.
  44. ↑ Manish Singh. New Android Adware Can Download, Install Apps Without Permission: Report. NDTV Gadgets360.com.
  45. ↑ Trojaner-Adware installiert selbstständig ungewollte Android-Apps. Areamobile.de.
  46. ↑ Shedun: Neue Android-Adware installiert Apps ohne deine Einwilligung. Androidmag.
  47. ↑ John Woll. Installation auch nach Ablehnung: Neue dreiste Android-Adware.
  48. ↑ Android Shedun Malware: New Malware That Can Grant Access to Your Phone; Malware Impossible To Be Removed?. Yibada.

Sumber dan atribusi

Konten artikel ini diadaptasi dari Wikipedia bahasa Indonesia, revisi 24050797 (2023-08-22T07:01:00Z), yang tersedia berdasarkan lisensi Creative Commons Atribusi-BerbagiSerupa (CC BY-SA). Mohon gunakan konten ini secara bijak serta sesuai dengan ketentuan lisensi yang berlaku.


Diperoleh dari "https://wiki.unissula.ac.id/index.php?title=Shedun&oldid=7590"