Shedun: Perbedaan antara revisi
Impor teks terkontrol dari Wikipedia bahasa Indonesia; revisi 24050797; atribusi sumber disertakan. |
Presentation V4: sitasi, referensi, Math, Wikimedia Commons, dan atribusi |
||
| Baris 1: | Baris 1: | ||
'''Shedun''' adalah nama dari keluarga [[virus ponsel]] (dikenal juga dengan Kemoge, Shiftybug, dan Shuanet) yang menyasar sistem berbasis [[Android (sistem operasi)|Android]]. Aksi Shedun terungkap pada 2015 oleh perusahaan keamanan ponsel Lookout, dan diperkirakan menginfeksi 20.000 aplikasi populer Android. | '''Shedun''' adalah nama dari keluarga [[virus ponsel]] (dikenal juga dengan Kemoge, Shiftybug, dan Shuanet<ref>by @HackTheW0r1d. [https://hackbails.wordpress.com/2015/11/05/trojanized-adware-already-infected-more-than-20000-android-apps/ Shuanet, ShiftyBug and Shedun malware could auto-root your Android – HackBails]. Hackbails.wordpress.com. 2015-11-05.</ref><ref>[http://www.securityweek.com/android-adware-abuses-accessibility-service-install-apps Android Adware Abuses Accessibility Service to Install Apps]. ''SecurityWeek.com''.</ref><ref>Manish Singh. [http://gadgets.ndtv.com/apps/news/new-android-adware-can-download-install-apps-without-permission-report-768664 New Android Adware Can Download, Install Apps Without Permission: Report]. ''NDTV Gadgets360.com''.</ref>) yang menyasar sistem berbasis [[Android (sistem operasi)|Android]]. Aksi Shedun terungkap pada 2015 oleh perusahaan keamanan ponsel Lookout, dan diperkirakan menginfeksi 20.000<ref>[http://forums.appleinsider.com/discussion/189949/three-new-malware-strains-infect-20k-apps-impossible-to-wipe-only-affect-android Three new malware strains infect 20k apps, impossible to wipe, only affect Android]. ''AppleInsider Forums''.</ref> aplikasi populer Android.<ref>Manish Singh. [http://gadgets.ndtv.com/apps/news/new-android-adware-can-download-install-apps-without-permission-report-768664 New Android Adware Can Download, Install Apps Without Permission: Report]. ''NDTV Gadgets360.com''.</ref><ref>[http://www.dailymail.co.uk/sciencetech/article-3306142/Hackers-reveal-Android-malware-IMPOSSIBLE-remove-Malicious-bug-20-000-apps.html Hackers reveal Android trojan malware that is IMPOSSIBLE to remove]. ''Mail Online''. 5 November 2015.</ref><ref>Daniel Eran. [http://appleinsider.com/articles/15/11/05/three-new-malware-strains-infect-20k-apps-impossible-to-wipe-only-affect-android Three new malware strains infect 20k apps, impossible to wipe, only affect Android]. Appleinsider.com. 2015-11-05.</ref><ref>[http://www.droidreport.com/articles/2516/20151110/android-malware-loose-shuanet-shiftybug-shedun-signatures-found-20000-apps-outside-google.htm Android Malware On The Loose: Shuanet, ShiftyBug And Shedun Signatures Found On 20,000 Apps Outside Google Play Store]. ''Droid Report''.</ref><ref>[http://darkmatters.norsecorp.com/2015/11/20/shedun/ Shedun Trojan goes solo]. ''Darkmatters''.</ref><ref>[http://lavasoft.com/mylavasoft/company/blog/popular-mobile-apps-repackaged-with-trojans Popular Mobile Apps Repackaged with Trojans]. Lavasoft. 2015-11-04.</ref> | ||
Avira Protection Labs menyatakan bahwa keluarga Shedun menginfeksi 1.500-20.000 ponsel per hari. Semua varian dari keluarga Sheldun memiliki kesamaan [[kode sumber]] sekitar 80%. | Avira Protection Labs menyatakan bahwa keluarga Shedun menginfeksi 1.500-20.000 ponsel per hari.<ref>[http://blog.avira.com/shedun/ Shedun: adware/malware family threatening your Android device]. ''Avira Blog''.</ref> Semua varian dari keluarga Sheldun memiliki kesamaan [[kode sumber]] sekitar 80%.<ref>[http://www.elektronikpraxis.vogel.de/iot/security/articles/510900/ Neue Welle von Android-Malware lässt sich kaum mehr entfernen]. ''Elektronikpraxis.vogel.de''.</ref><ref>PMK Presse, Messe & Kongresse Verlags GmbH. [http://www.itseccity.de/virenwarnung/hintergrund/lookout021215.html Gemeinsamkeiten: Shuanet, Shedun & ShiftyBug]. ''Itseccity.de''.</ref> | ||
Aksi Shedun dimulai dengan "membungkus kembali" aplikasi Android asli (seperti [[Facebook]], [[Twitter]], [[WhatsApp]], [[Candy Crush Saga|Candy Crush]], [[Google Now]], dan [[Snapchat]]) dengan ditambah ''adware'', kemudian diedarkan melalui situs unduhan aplikasi pihak ketiga. Ketika diunduh dan dipasang oleh korbannya, aplikasi-aplikasi tersebut tetap berjalan seperti biasa, tetapi korban mengeluhkan munculnya iklan mengganggu (laba dari iklan tersebut mencapai $2 per pemasangan). Malware ini bercokol sedemikian kuat, hingga jalan satu-satunya adalah me-[[Root (Android)|root]] ponsel korban dan memasang kembali ROM pabrik. | Aksi Shedun dimulai dengan "membungkus kembali" aplikasi Android asli (seperti [[Facebook]], [[Twitter]], [[WhatsApp]], [[Candy Crush Saga|Candy Crush]], [[Google Now]], dan [[Snapchat]]<ref>[https://blog.botfrei.de/2015/11/android-trojaner-auf-dem-vormarsch/ Android-Malware: Adware war gestern. Android-Trojaner auf dem Vormarsch]. ''botfrei Blog''.</ref>)<ref>[http://forums.appleinsider.com/discussion/189949/three-new-malware-strains-infect-20k-apps-impossible-to-wipe-only-affect-android Three new malware strains infect 20k apps, impossible to wipe, only affect Android]. ''AppleInsider Forums''.</ref><ref>[https://arstechnica.com/security/2015/11/new-type-of-auto-rooting-android-adware-is-nearly-impossible-to-remove/ New type of auto-rooting Android adware is nearly impossible to remove]. ''Ars Technica''.</ref><ref>Michael Mimoso. [https://threatpost.com/shuanet-adware-rooting-android-devices-via-trojanized-apps/115265/ Shuanet Adware Roots Android Devices - Threatpost - The first stop for security news]. ''Threatpost - The first stop for security news''.</ref> dengan ditambah ''adware'', kemudian diedarkan melalui situs unduhan aplikasi pihak ketiga.<ref>[http://www.itespresso.de/2015/11/23/shedun-adware-nistet-sich-gegen-den-willen-der-nutzer-in-android-ein/ Adware Shedun nistet sich gegen den Willen der Nutzer in Android ein]. ''ITespresso.de''.</ref> Ketika diunduh dan dipasang oleh korbannya, aplikasi-aplikasi tersebut tetap berjalan seperti biasa, tetapi korban mengeluhkan munculnya iklan mengganggu (laba dari iklan tersebut mencapai $2 per pemasangan<ref>Michael Mimoso. [https://threatpost.com/shuanet-adware-rooting-android-devices-via-trojanized-apps/115265/ Shuanet Adware Roots Android Devices - Threatpost - The first stop for security news]. ''Threatpost - The first stop for security news''.</ref>). Malware ini bercokol sedemikian kuat, hingga jalan satu-satunya adalah me-[[Root (Android)|root]] ponsel korban dan memasang kembali ROM pabrik.<ref>[http://www.dailymail.co.uk/sciencetech/article-3306142/Hackers-reveal-Android-malware-IMPOSSIBLE-remove-Malicious-bug-20-000-apps.html Hackers reveal Android trojan malware that is IMPOSSIBLE to remove]. ''Mail Online''. 5 November 2015.</ref><ref>[http://en.yibada.com/articles/82763/20151108/android-trojan-software-morphs-real-apps-nearly-impossible-remove-device.htm Android Trojan Software Morphs Into Real Apps, Nearly Impossible To Remove From Device’s System: Report]. ''Yibada''.</ref><ref>[http://www.golem.de/news/android-malware-schadsoftware-rootet-und-infiziert-geraete-unwiederbringlich-1511-117307.html Android-Malware: Neue Schadsoftware rootet Geräte und ist kaum zu entfernen - Golem.de].</ref> | ||
Malware ini terdeteksi pada 26 tipe [[perangkat keras]] berbasis Android baru yang dibuat di [[Republik Rakyat Tiongkok|Tiongkok]], seperti ponsel pintar dan tablet. | Malware ini terdeteksi pada 26 tipe<ref>Swati Khandelwal. [http://thehackernews.com/2015/09/android-smartphone-malware.html 26 Android Phone Models Shipped with Pre-Installed Spyware]. ''The Hacker News''. 3 September 2015.</ref> [[perangkat keras]] berbasis Android baru yang dibuat di [[Republik Rakyat Tiongkok|Tiongkok]], seperti ponsel pintar dan tablet.<ref>[https://public.gdatasoftware.com/Presse/Publikationen/Malware_Reports/G_DATA_MobileMWR_Q2_2015_US.pdf G Data : Mobile Malware Report]. ''Public.gdatasoftware.com''.</ref><ref>Catalin Cimpanu. [http://news.softpedia.com/news/24-chinese-android-smartphones-models-come-with-pre-installed-malware-490930.shtml 24 Chinese Android Smartphone Models Come with Pre-Installed Malware]. ''softpedia''. 4 September 2015.</ref><ref>David Gilbert. [http://www.ibtimes.com/amazon-selling-40-android-tablets-come-pre-installed-malware-2181424 Amazon Selling $40 Android Tablets That Come With Pre-Installed Malware]. ''International Business Times''.</ref><ref>[http://securityaffairs.co/wordpress/39821/hacking/chinese-smartphones-pre-installed-malware.html Chinese smartphones infected with pre-installed malwareSecurity Affairs]. ''Security Affairs''.</ref><ref>[http://www.scmagazine.com/chinese-android-smartphones-now-shipping-with-pre-installed-malware/article/436655/ Chinese Android smartphones now shipping with pre-installed malware]. ''SC Magazine''.</ref><ref>Diane Samson. [http://au.idigitaltimes.com/malware-found-pre-installed-xiaomi-huawei-lenovo-phones-107190 Malware Found Pre-Installed on Xiaomi, Huawei, Lenovo Phones]. ''iDigitalTimes.com''.</ref><ref>[http://www.designntrend.com/articles/64631/20151113/amazon-s-40-chinese-android-tablets-infected-pre-installed-malware.htm Amazon’s $40 Chinese Android Tablets Infected With Pre-Installed Malware]. ''Design & Trend''.</ref><ref>Jeremy Kirk. [http://www.computerworld.com/article/2488173/security0/pre-installed-malware-found-on-new-android-phones.html Pre-installed malware found on new Android phones]. ''Computerworld''. 5 March 2014.</ref><ref>[https://public.gdatasoftware.com/Presse/Publikationen/Malware_Reports/G_DATA_MobileMWR_Q2_2015_EN.pdf G Data : Mobile Malware Report]. ''Public.gdatasoftware.com''.</ref><ref>Waqas. [https://www.hackread.com/amazon-safe-haven-for-android-tablets-malware/ Amazon Store, a safe haven for Android Tablets with pre-installed malware]. ''HackRead''.</ref><ref>[https://tafsiran.com/cara-mengatasi-layanan-google-play-terus-berhenti/ Pre-Installed Android Malware Raises Security Risks in Supply Chain]. Juli 2022.</ref><ref>[http://www.huffingtonpost.com/entry/android-malware-pre-installed_us_55e6f2e8e4b0aec9f355271f Some Android Phones Come With Malware Pre-Installed: Report]. ''The Huffington Post''.</ref><ref>[http://wccftech.com/brand-android-smartphones-coming-spyware-malware/ Brand New Android Smartphones Coming with Spyware and Malware]. ''WCCFtech''.</ref><ref>[https://www.grahamcluley.com/2014/06/chinese-android-malware/ Chinese Android smartphone comes with malware pre-installed]. ''Graham Cluley''.</ref><ref>Martin Brinkmann. [http://www.ghacks.net/2015/09/08/beware-your-android-phone-might-come-with-preloaded-spyware/ Beware, your Android phone might come with preloaded spyware]. ''gHacks Technology News''. 8 September 2015.</ref> | ||
Keluarga ''malware'' ini juga diketahui memiliki kemampuan auto-root | Keluarga ''malware'' ini juga diketahui memiliki kemampuan auto-root <ref>[https://arstechnica.com/security/2015/11/new-type-of-auto-rooting-android-adware-is-nearly-impossible-to-remove/ New type of auto-rooting Android adware is nearly impossible to remove]. ''Ars Technica''.</ref><ref>[http://techreport.com/news/29281/trojan-adware-on-android-can-give-itself-root-access Trojan adware on Android can give itself root access]. ''The Tech Report''.</ref> menggunakan celah keamanan seperti ExynosAbuse, Memexploit, dan Framaroot <ref>[http://praxistipps.chip.de/shedun-shuanet-und-shiftybug-android-smartphone-vor-malware-schuetzen_44475 Shedun, Shuanet und Shiftybug: Android-Smartphone vor Malware schützen].</ref> dan memasang dirinya sendiri sebagai aplikasi sistem dan membuat salinan dirinya di partisi sistem, sehingga "setel ulang ke pabrikan" tidak dapat mengatasi malware ini.<ref>[https://www.theregister.co.uk/2015/11/20/shedun_adware/ Android's accessibility service grants god-mode p0wn power].</ref><ref>[https://blog.lookout.com/blog/2015/11/19/shedun-trojanized-adware/ Trojanized adware family abuses accessibility service to install whatever apps it wants | Lookout Blog]. ''Blog.lookout.com''. 2015-11-19.</ref> | ||
Keluarga ''malware'' ini sering kali memasang aplikasi adware lain tanpa seizin korbannya,<ref>Manish Singh. [http://gadgets.ndtv.com/apps/news/new-android-adware-can-download-install-apps-without-permission-report-768664 New Android Adware Can Download, Install Apps Without Permission: Report]. ''NDTV Gadgets360.com''.</ref> sehingga diklasifikasikan sebagai "''adware'' agresif" karena sering memasang "aplikasi yang tak diinginkan"<ref>[http://www.areamobile.de/news/35337-trojaner-adware-installiert-selbststaendig-ungewollte-android-apps Trojaner-Adware installiert selbstständig ungewollte Android-Apps]. ''Areamobile.de''.</ref><ref>[http://androidmag.de/news/technik-news/shedun-neue-android-adware-installiert-apps-ohne-deine-einwilligung/ Shedun: Neue Android-Adware installiert Apps ohne deine Einwilligung]. ''Androidmag''.</ref><ref>John Woll. [http://winfuture.de/news,89953.html Installation auch nach Ablehnung: Neue dreiste Android-Adware].</ref> sekaligus membombardir ponsel korban dengan iklan.<ref>[http://en.yibada.com/articles/90437/20151201/android-shedun-malware.htm Android Shedun Malware: New Malware That Can Grant Access to Your Phone; Malware Impossible To Be Removed?]. ''Yibada''.</ref> | |||
== Referensi == | |||
<references /> | |||
== Sumber dan atribusi == | == Sumber dan atribusi == | ||
Konten artikel ini diadaptasi dari [https://id.wikipedia.org/w/index.php?title=Shedun&oldid=24050797 Wikipedia bahasa Indonesia], revisi 24050797 (2023-08-22T07:01:00Z), yang tersedia berdasarkan lisensi Creative Commons Atribusi-BerbagiSerupa (CC BY-SA). Mohon gunakan konten ini secara bijak serta sesuai dengan ketentuan lisensi yang berlaku. | Konten artikel ini diadaptasi dari [https://id.wikipedia.org/w/index.php?title=Shedun&oldid=24050797 Wikipedia bahasa Indonesia], revisi 24050797 (2023-08-22T07:01:00Z), yang tersedia berdasarkan lisensi Creative Commons Atribusi-BerbagiSerupa (CC BY-SA). Mohon gunakan konten ini secara bijak serta sesuai dengan ketentuan lisensi yang berlaku. | ||
<!-- WIKI_UNISSULA_PRESENTATION_V4 --> | |||
Revisi terkini sejak 24 Agustus 2026 18.07
Shedun adalah nama dari keluarga virus ponsel (dikenal juga dengan Kemoge, Shiftybug, dan Shuanet[1][2][3]) yang menyasar sistem berbasis Android. Aksi Shedun terungkap pada 2015 oleh perusahaan keamanan ponsel Lookout, dan diperkirakan menginfeksi 20.000[4] aplikasi populer Android.[5][6][7][8][9][10]
Avira Protection Labs menyatakan bahwa keluarga Shedun menginfeksi 1.500-20.000 ponsel per hari.[11] Semua varian dari keluarga Sheldun memiliki kesamaan kode sumber sekitar 80%.[12][13]
Aksi Shedun dimulai dengan "membungkus kembali" aplikasi Android asli (seperti Facebook, Twitter, WhatsApp, Candy Crush, Google Now, dan Snapchat[14])[15][16][17] dengan ditambah adware, kemudian diedarkan melalui situs unduhan aplikasi pihak ketiga.[18] Ketika diunduh dan dipasang oleh korbannya, aplikasi-aplikasi tersebut tetap berjalan seperti biasa, tetapi korban mengeluhkan munculnya iklan mengganggu (laba dari iklan tersebut mencapai $2 per pemasangan[19]). Malware ini bercokol sedemikian kuat, hingga jalan satu-satunya adalah me-root ponsel korban dan memasang kembali ROM pabrik.[20][21][22]
Malware ini terdeteksi pada 26 tipe[23] perangkat keras berbasis Android baru yang dibuat di Tiongkok, seperti ponsel pintar dan tablet.[24][25][26][27][28][29][30][31][32][33][34][35][36][37][38]
Keluarga malware ini juga diketahui memiliki kemampuan auto-root [39][40] menggunakan celah keamanan seperti ExynosAbuse, Memexploit, dan Framaroot [41] dan memasang dirinya sendiri sebagai aplikasi sistem dan membuat salinan dirinya di partisi sistem, sehingga "setel ulang ke pabrikan" tidak dapat mengatasi malware ini.[42][43]
Keluarga malware ini sering kali memasang aplikasi adware lain tanpa seizin korbannya,[44] sehingga diklasifikasikan sebagai "adware agresif" karena sering memasang "aplikasi yang tak diinginkan"[45][46][47] sekaligus membombardir ponsel korban dengan iklan.[48]
Referensi
- ↑ by @HackTheW0r1d. Shuanet, ShiftyBug and Shedun malware could auto-root your Android – HackBails. Hackbails.wordpress.com. 2015-11-05.
- ↑ Android Adware Abuses Accessibility Service to Install Apps. SecurityWeek.com.
- ↑ Manish Singh. New Android Adware Can Download, Install Apps Without Permission: Report. NDTV Gadgets360.com.
- ↑ Three new malware strains infect 20k apps, impossible to wipe, only affect Android. AppleInsider Forums.
- ↑ Manish Singh. New Android Adware Can Download, Install Apps Without Permission: Report. NDTV Gadgets360.com.
- ↑ Hackers reveal Android trojan malware that is IMPOSSIBLE to remove. Mail Online. 5 November 2015.
- ↑ Daniel Eran. Three new malware strains infect 20k apps, impossible to wipe, only affect Android. Appleinsider.com. 2015-11-05.
- ↑ Android Malware On The Loose: Shuanet, ShiftyBug And Shedun Signatures Found On 20,000 Apps Outside Google Play Store. Droid Report.
- ↑ Shedun Trojan goes solo. Darkmatters.
- ↑ Popular Mobile Apps Repackaged with Trojans. Lavasoft. 2015-11-04.
- ↑ Shedun: adware/malware family threatening your Android device. Avira Blog.
- ↑ Neue Welle von Android-Malware lässt sich kaum mehr entfernen. Elektronikpraxis.vogel.de.
- ↑ PMK Presse, Messe & Kongresse Verlags GmbH. Gemeinsamkeiten: Shuanet, Shedun & ShiftyBug. Itseccity.de.
- ↑ Android-Malware: Adware war gestern. Android-Trojaner auf dem Vormarsch. botfrei Blog.
- ↑ Three new malware strains infect 20k apps, impossible to wipe, only affect Android. AppleInsider Forums.
- ↑ New type of auto-rooting Android adware is nearly impossible to remove. Ars Technica.
- ↑ Michael Mimoso. Shuanet Adware Roots Android Devices - Threatpost - The first stop for security news. Threatpost - The first stop for security news.
- ↑ Adware Shedun nistet sich gegen den Willen der Nutzer in Android ein. ITespresso.de.
- ↑ Michael Mimoso. Shuanet Adware Roots Android Devices - Threatpost - The first stop for security news. Threatpost - The first stop for security news.
- ↑ Hackers reveal Android trojan malware that is IMPOSSIBLE to remove. Mail Online. 5 November 2015.
- ↑ Android Trojan Software Morphs Into Real Apps, Nearly Impossible To Remove From Device’s System: Report. Yibada.
- ↑ Android-Malware: Neue Schadsoftware rootet Geräte und ist kaum zu entfernen - Golem.de.
- ↑ Swati Khandelwal. 26 Android Phone Models Shipped with Pre-Installed Spyware. The Hacker News. 3 September 2015.
- ↑ G Data : Mobile Malware Report. Public.gdatasoftware.com.
- ↑ Catalin Cimpanu. 24 Chinese Android Smartphone Models Come with Pre-Installed Malware. softpedia. 4 September 2015.
- ↑ David Gilbert. Amazon Selling $40 Android Tablets That Come With Pre-Installed Malware. International Business Times.
- ↑ Chinese smartphones infected with pre-installed malwareSecurity Affairs. Security Affairs.
- ↑ Chinese Android smartphones now shipping with pre-installed malware. SC Magazine.
- ↑ Diane Samson. Malware Found Pre-Installed on Xiaomi, Huawei, Lenovo Phones. iDigitalTimes.com.
- ↑ Amazon’s $40 Chinese Android Tablets Infected With Pre-Installed Malware. Design & Trend.
- ↑ Jeremy Kirk. Pre-installed malware found on new Android phones. Computerworld. 5 March 2014.
- ↑ G Data : Mobile Malware Report. Public.gdatasoftware.com.
- ↑ Waqas. Amazon Store, a safe haven for Android Tablets with pre-installed malware. HackRead.
- ↑ Pre-Installed Android Malware Raises Security Risks in Supply Chain. Juli 2022.
- ↑ Some Android Phones Come With Malware Pre-Installed: Report. The Huffington Post.
- ↑ Brand New Android Smartphones Coming with Spyware and Malware. WCCFtech.
- ↑ Chinese Android smartphone comes with malware pre-installed. Graham Cluley.
- ↑ Martin Brinkmann. Beware, your Android phone might come with preloaded spyware. gHacks Technology News. 8 September 2015.
- ↑ New type of auto-rooting Android adware is nearly impossible to remove. Ars Technica.
- ↑ Trojan adware on Android can give itself root access. The Tech Report.
- ↑ Shedun, Shuanet und Shiftybug: Android-Smartphone vor Malware schützen.
- ↑ Android's accessibility service grants god-mode p0wn power.
- ↑ Trojanized adware family abuses accessibility service to install whatever apps it wants | Lookout Blog. Blog.lookout.com. 2015-11-19.
- ↑ Manish Singh. New Android Adware Can Download, Install Apps Without Permission: Report. NDTV Gadgets360.com.
- ↑ Trojaner-Adware installiert selbstständig ungewollte Android-Apps. Areamobile.de.
- ↑ Shedun: Neue Android-Adware installiert Apps ohne deine Einwilligung. Androidmag.
- ↑ John Woll. Installation auch nach Ablehnung: Neue dreiste Android-Adware.
- ↑ Android Shedun Malware: New Malware That Can Grant Access to Your Phone; Malware Impossible To Be Removed?. Yibada.
Sumber dan atribusi
Konten artikel ini diadaptasi dari Wikipedia bahasa Indonesia, revisi 24050797 (2023-08-22T07:01:00Z), yang tersedia berdasarkan lisensi Creative Commons Atribusi-BerbagiSerupa (CC BY-SA). Mohon gunakan konten ini secara bijak serta sesuai dengan ketentuan lisensi yang berlaku.