Tips Agar Terhindar dari Malware di Android Market

Kata siapa mengunduh aplikasi di Android Market itu bebas dari penyusupan Malware. Buktinya, tim keamanan Trend Micro baru saja mendeteksi adanya serangan malware dengan kode, ANDROIDOS_RUFRAUD.A, masuk sebagai aplikasi resmi yang seolah-olah ditawarkan dari dalam Android market. Beberapa pengguna telah menginstal aplikasi tipuan tersebut sebelum Google menghentikan layanannya segera setalah mendapat reaksi dan respon dari pengguna yang waspada.
Setidaknya hingga tahun depan, saat Android menawarkan aplikasi seharga 10 cent saja untuk merayakan 10 milyar download, pengguna biasanya cenderung terpancing untuk menginstal aplikasi dengan biaya murah tersebut tanpa sadar mereka telah menggiring masuk malware.
Karena itu lah untuk membantu pengguna, Trend Micro memberikan panduan agar pengunduh bisa memperhatikan hal kunci sebelum menginstal aplikasi dari Android market.

Tips pertama: Cek lah developer dibalik pembuat aplikasi yang ditawarkan
Penjahat dunia maya secara teratur selalu mengikuti aplikasi apa yang sedang populer, kemudia mereka membuat tiruannya. Misalnya malicious aplikasi untuk game terkenal Angry Birds, besutan Rovio Mobile, pernah dibuat tipuan malicious-nya dari developer Logastrod.

Untuk memastikan si pembuat aplikasi memiliki reputasi, cek lah bagaimana si developer memberikan catatan pada aplikasi yang pernah dibuat. Jika developer tersebut miskin informasi, lebih baik Anda abaikan untuk menginstal aplikasinya.

Tips Kedua: Cek rating dan review terhadap aplikasi
Pada aplikasi yang asli biasanya mendapatkan banyak rating dari beberapa reviewer di dalam Android market, sedangkan aplikasi palsu hanya memberikan kurang dari dua puluh rating. Semakin banyak rating dan review yang diberikan, artinya Anda memasuki halaman aplikasi yang dijamin benar.

Comments

Fix HTTPS issue in browser - Burp Suite

If you get message "Software is Preventing Firefox From Safely Connecting to This Site. Most likely a safe site, but a secure connection could not be established. This issue is caused by The original certificate provided by the web server is untrusted., which is either software on your computer or your network." lets see the tutorial. 1. With Burp suite running, visit http://burp in your browser and click the "CA Certificate" link to download and save your Burp CA certificate. Remember where you save the Burp CA certificate.

How To Enable DNS over HTTPS

DNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol. A goal of the method is to increase user privacy and security by preventing eavesdropping and manipulation of DNS data by man-in-the-middle attacks by using the HTTPS protocol to encrypt the data between the DoH client and the DoH-based DNS resolver. An alternative to DoH is the DNS over TLS (DoT) protocol, a similar standard for encrypting DNS queries, differing only in the methods used for encryption and delivery. On the basis of privacy and security, whether or not a superior protocol exists among the two is a matter of controversial debate, while others argue the merits of either depend on the specific use case. Benefits DoH improves privacy by hiding domain name lookups from someone lurking on public WiFi, your ISP, or anyone else on your local network. DoH, when enabled, ensures that your ISP cannot collect and sell personal information related to your browsi

Artillery - Binary Defense Project

Project Artillery is an open source project aimed at the detection of early warning indicators and attacks. The concept is that Artillery will spawn multiple ports on a system giving the attacker the idea that multiple ports are exposed. Additionally, Artillery actively monitors the filesystem for changes, brute force attacks, and other indicators of compromise. Artillery is a full suite for protection against attack on Linux and Windows based devices. It can be used as an early warning indicator of attackers on your network. Additionally, Artillery integrates into threat intelligence feeds which can notify when a previously seen attacker IP address has been identified. Artillery supports multiple configuration types, different versions of Linux, and can be deployed across multiple systems and events sent centrally. Artillery is a combination of a honeypot, monitoring tool, and alerting system. Eventually this will evolve into a hardening monitoring platform as well to detect ins

-=[ vYc0d Blog ]=-

Search This Blog