Hacking program due to be released next week
vnunet.com, 09 Aug 2006
Many enterprises that have issued staff with BlackBerry mobile email devices will be vulnerable to a serious hack attack when security researchers release exploit code, security experts warned today.
According to Secure Computing Corporation, any firm that has deployed a BlackBerry server behind its gateway could fall foul to the hacking code that is due to be published by IT security specialist Jesse D'Aguanno next week.
The soon-to-be-released hacking program, called BBProxy, can be installed on a BlackBerry or sent as an email attachment to an unsuspecting user. Once installed, BBProxy opens a back channel bypassing the organisation's gateway security mechanisms between the hacker and the inside of the victim's network, Secure Computing stated.
Since the communications channel between the BlackBerry server and handheld device is encrypted and cannot be properly inspected by typical security products, a tunnel is most often opened by the administrator to allow the encrypted communications channel to the BlackBerry server inside the organisation's network. A malicious person could potentially use this back channel to move around inside an organisation unabated and remove confidential information undetected or use the back channel to install malware on the network.
Paul Henry, vice president of Strategic Accounts for Secure Computing, warned that servers connecting to the public internet have an inherent risk: " Isolating these internet-facing servers reduces the risk of a compromised server providing access to other critical servers. Hence due diligence would require that any internet-facing server like a BlackBerry server should be isolated on its own demilitarised zone segment," said Henry.
He also advised enterprises to ensure that their mail servers working with the BlackBerry server are also an internet-facing server and should also be isolated on their own separate DMZ.
Additional protection can be achieved by preventing internal users from opening arbitrary connections to either the BlackBerry server or mail server.
In part one of V3.co.uk's interview with Dirk Singer, he dicusses social media monitoring strategies
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
Analyst Simon Perry argues that the data deluge doesn't have...
Do you agree?
Have your say on this article