Re: [TSCM-L] {5224} Cell Phone spyware database from Its from Onion on 2011-01-18 (file.mbox)

From: Its from Onion <areda..._at_msn.com>
Date: Tue, 18 Jan 2011 18:04:01 -0600

>From - Sat Mar 02 00:57:18 2024
Received: by 10.142.143.19 with SMTP id q19mr119470wfd.53.1295443021191;
 Wed, 19 Jan 2011 05:17:01 -0800 (PST)
X-BeenThere: tscm-l2006_at_googlegroups.com
Received: by 10.142.2.41 with SMTP id 41ls1675400wfb.0.p; Wed, 19 Jan 2011
05:16:54 -0800 (PST)
MIME-Version: 1.0
Received: by 10.142.213.18 with SMTP id l18mr32708wfg.46.1295443014484; Wed,
19 Jan 2011 05:16:54 -0800 (PST)
Received: by 37g2000prx.googlegroups.com with HTTP; Wed, 19 Jan 2011 05:16:54
-0800 (PST)
Date: Wed, 19 Jan 2011 05:16:54 -0800 (PST)
In-Reply-To: <00a001cbb76f$f394f6f0$dabee4d0$_at_com>
X-IP: 80.168.204.163
References: <002701cbb765$53fb0210$fbf10630$_at_com> <SNT107-DS1129356AF718DAF793DB6BBCF60_at_phx.gbl>
<00a001cbb76f$f394f6f0$dabee4d0$_at_com>
User-Agent: G2/1.0
X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
AppleWebKit/532.5 (KHTML, like Gecko) Chrome/4.1.249.1036 Safari/532.5,gzip(gfe)
Message-ID: <f64f6c0c-e424-4891-9930-f92731092274_at_37g2000prx.googlegroups.com>
Subject: Re: {5225} Cell Phone spyware database
From: "pauls..._at_faberbrent.com" <pauls..._at_faberbrent.com>
To: TSCM-L Professionals List <tscm-..._at_googlegroups.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi Mitch,

I did some research last year. It was as comprehensive as i could make
it then but about 12 months out of date.

http://www.faberbrent.com/TSCM/spyphonesoftware.html

Kind regards
Paul

NB - in my experience there are (of course) more phones that can be
'got to' than the ones published.

On Jan 19, 12:29=A0am, "TSCM/SO Group" <m..._at_tscmusa.com> wrote:
> If you have idle time, you can scour the web for the cos that sell their
> warez and look for the installers in their how to areas, some may be on y=
ou
> tube. Anything credible would be great. Im sure jmatk would want the fina=
l
> project avail on the groups site as well.
>
> Thanks again!
>
> Mitch Davis
>
> TSCM/Special Operations Group Inc.
>
> 20 Music Square West,Suite 208
>
> Nashville, TN. 37203 USA
>
> 615.251.0441
>
> Fax 615.523.0300
>
> www.tscmusa.com
>
> ***********************************
>
> "Maintaining a higher degree of excellence"
>
> *****************************************
>
> This message is intended only for the use of the individual or entity to
> which it is addressed and may contain information that is privileged,
> confidential and exempt from disclosure under applicable law. If the read=
er
> of this message is not the intended recipient or agent responsible for
> delivering the message to the intended recipient, you are hereby notified
> that any dissemination or copying of this communication is strictly
> prohibited. If you have received this electronic transmission in error,
> please delete it from your system without copying it and notify the sende=
r
> by reply e-mail so that the email address record can be corrected. Thank
> you.
>
> From: Its from Onion [mailto:ared..._at_msn.com]
> Sent: Tuesday, January 18, 2011 6:04 PM
> To: tscm-..._at_googlegroups.com
> Subject: Re: [TSCM-L] {5225} Cell Phone spyware database
>
> Great idea Mitch, let me know if I can help.
>
> Onion
>
>
>
> ----- Original Message -----
>
> From: TSCM/SO Group <mailto:m..._at_tscmusa.com> =A0
>
> To: TSC..._at_yahoogroups.com
>
> Cc: tscm-..._at_googlegroups.com
>
> Sent: Tuesday, January 18, 2011 5:13 PM
>
> Subject: [TSCM-L] {5224} Cell Phone spyware database
>
> Dear Group,
>
> I'm in the process of assembling a list of malware, viruses and spyware t=
hat
> typically affect cell phones and smart phones through physical
> implementation and remote installations If you know of any particulars it=
ems
> that you have observed in use ,or know your clients may have used I'm
> interested .Ill make this available to all contributors, and will probabl=
y
> post it to my website.
>
> Heres what would be most helpful:
>
> Example: Cell Recon : Installs through the web and downloading a file wit=
h
> the target phone. The program that is installed is called foto viewer, ES=
N
> and number is needed when you register for this service on the providers
> website. Cost: 99.00
>
> There are plenty of references on the net about cell phone spyware, but w=
hat
> were looking for is credible information from our industry so we can all
> understand how the rougue wares are implemented.
>
> As time goes on, the installers and file signatures relative to cell spyw=
are
> will change as more information becomes available and knowledge of the
> installers and background programs become known. With Verizon taking on t=
he
> IPhone, and androids selling by the millions, the cell phone spyware wars
> will increase as its an open market. The legalities are a different issue=
to
> be saved for a later date, right now we are interested in spyware for cel=
l
> phones =A0only.
>
> Any assistance will be appreciated, as I mentioned earlier, this informat=
ion
> will become available to all in our industry.
>
> Thanks in advance!
>
> MD
>
> Mitch Davis
>
> TSCM/Special Operations Group Inc.
>
> 20 Music Square West,Suite 208
>
> Nashville, TN. 37203 USA
>
> 615.251.0441
>
> Fax 615.523.0300
>
> www.tscmusa.com
>
> ***********************************
>
> "Maintaining a higher degree of excellence"
>
> *****************************************
>
> __._,_.___
>
> __,_._,___
>From - Sat Mar 02 00:57:18 2024
Received: by 10.142.178.6 with SMTP id a6mr1386253wff.40.1295392420285;
 Tue, 18 Jan 2011 15:13:40 -0800 (PST)
X-BeenThere: tscm-l2006_at_googlegroups.com
Received: by 10.142.2.41 with SMTP id 41ls922176wfb.0.p; Tue, 18 Jan 2011
15:13:34 -0800 (PST)
Received: by 10.142.239.10 with SMTP id m10mr1465641wfh.60.1295392414896;
 Tue, 18 Jan 2011 15:13:34 -0800 (PST)
Received: by 10.142.239.10 with SMTP id m10mr1465640wfh.60.1295392414834;
 Tue, 18 Jan 2011 15:13:34 -0800 (PST)
Return-Path: <mit..._at_tscmusa.com>
Received: from qmta09.emeryville.ca.mail.comcast.net (qmta09.emeryville.ca.mail.comcast.net [76.96.30.96])
 by gmr-mx.google.com with ESMTP id f13si7102289wfo.0.2011.01.18.15.13.34;
 Tue, 18 Jan 2011 15:13:34 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning mit..._at_tscmusa.com does not designate 76.96.30.96 as permitted sender) client-ip=76.96.30.96;
Authentication-Results: gmr-mx.google.com; spf=softfail (google.com: domain of transitioning mit..._at_tscmusa.com does not designate 76.96.30.96 as permitted sender) smtp.mail=mit..._at_tscmusa.com
Received: from omta07.emeryville.ca.mail.comcast.net ([76.96.30.59])
 by qmta09.emeryville.ca.mail.comcast.net with comcast
 id x1sp1f0041GXsucA9BDagm; Tue, 18 Jan 2011 23:13:34 +0000
Received: from TSCMPC ([68.53.112.91])
 by omta07.emeryville.ca.mail.comcast.net with comcast
 id xBDY1f00H1yNDRQ8UBDZZf; Tue, 18 Jan 2011 23:13:34 +0000
From: "TSCM/SO Group" <mit..._at_tscmusa.com>
To: <TSCM..._at_yahoogroups.com>
Cc: <tscm-..._at_googlegroups.com>
Subject: Cell Phone spyware database
Date: Tue, 18 Jan 2011 17:13:32 -0600
Message-ID: <002701cbb765$53fb0210$fbf10630$_at_com>
MIME-Version: 1.0
Content-Type: multipart/related;
 boundary="----=_NextPart_000_0028_01CBB733.09609210"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Acu3O74q9vBKVTsvTj2Nx4n0/0D0hAAKOKtA
Content-Language: en-us

------=_NextPart_000_0028_01CBB733.09609210
Content-Type: multipart/alternative;
 boundary="----=_NextPart_001_0029_01CBB733.09609210"

------=_NextPart_001_0029_01CBB733.09609210
Content-Type: text/plain;
 charset="us-ascii"
Content-Transfer-Encoding: 7bit



Dear Group,

I'm in the process of assembling a list of malware, viruses and spyware that
typically affect cell phones and smart phones through physical
implementation and remote installations If you know of any particulars items
that you have observed in use ,or know your clients may have used I'm
interested .Ill make this available to all contributors, and will probably
post it to my website.

Heres what would be most helpful:

Example: Cell Recon : Installs through the web and downloading a file with
the target phone. The program that is installed is called foto viewer, ESN
and number is needed when you register for this service on the providers
website. Cost: 99.00

There are plenty of references on the net about cell phone spyware, but what
were looking for is credible information from our industry so we can all
understand how the rougue wares are implemented.

As time goes on, the installers and file signatures relative to cell spyware
will change as more information becomes available and knowledge of the
installers and background programs become known. With Verizon taking on the
IPhone, and androids selling by the millions, the cell phone spyware wars
will increase as its an open market. The legalities are a different issue to
be saved for a later date, right now we are interested in spyware for cell
phones only.

Any assistance will be appreciated, as I mentioned earlier, this information
will become available to all in our industry.

Thanks in advance!

MD

Mitch Davis

TSCM/Special Operations Group Inc.

20 Music Square West,Suite 208

Nashville, TN. 37203 USA

615.251.0441

Fax 615.523.0300

www.tscmusa.com

***********************************

"Maintaining a higher degree of excellence"

*****************************************

__._,_.___

__,_._,___

------=_NextPart_001_0029_01CBB733.09609210
Content-Type: text/html;
 charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40"><head><meta http-equiv=3DContent-Type content=
=3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros=
oft Word 12 (filtered medium)"><style></style></head><body bgcolor=3Dwhite lang=3DEN-US=
link=3D"#1E66AE" vlink=3D"#1E66AE"><div class=3DWordSection1><o:p> </o:p><o:p> =
</o:p>  <o:p></o:p><div id=3Dygrp-mlmsg><=
div id=3Dygrp-msg><div id=3Dygrp-text><div>Dear Group,<o:p></o:p></p=
>I’m in the process of assembling a list of malware, viruses a=
nd spyware that typically affect cell phones and smart phones through physi=
cal implementation and remote installations If you know of any particulars =
items that you have observed in use ,or know your clients may have used I&#=
8217;m interested .Ill make this available to all contributors, and will pr=
obably post it to my website.<o:p></o:p> <o:p></o:p>Heres what would be most helpful:<o:p></o:p> <o:p></o:p=
>Example: Cell Recon : Installs through the web and downloading =
a file with the target phone. The program that is installed is called foto =
viewer, ESN and number is needed when you register for this service on the =
providers website. Cost: 99.00<o:p></o:p> <o:p></o:p><p=
class=3DMsoNormal style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:a=
uto'>There are plenty of references on the net about cell phone spyware, bu=
t what were looking for is credible information from our industry so we can=
all understand how the rougue wares are implemented.<o:p></o:p>=
As time goes on, the installers and file signatures relative to cell spywar=
e will change as more information becomes available and knowledge of the in=
stallers and background programs become known. With Verizon taking on the I=
Phone, and androids selling by the millions, the cell phone spyware wars wi=
ll increase as its an open market. The legalities are a different issue to =
be saved for a later date, right now we are interested in spyware for cell =
phones  only.<o:p></o:p> <o:p></o:p>Any ass=
istance will be appreciated, as I mentioned earlier, this information will =
become available to all in our industry.<o:p></o:p> <o:p></=
o:p>Thanks in advance!<o:p></o:p>MD <o:p></o:p><=
p class=3DMsoNormal style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:=
auto'> <o:p></o:p> <o:p></o:p>Mitch Davi=
s<o:p></o:p>TSCM/Special Operations Group Inc.<o:p></=
o:p>20 Music Square West,Suite 208 <o:p></o:p>Nashvil=
le, TN. 37203 USA<o:p></o:p>615.251.0441<o:p></o:p>F=
ax 615.523.0300<o:p></o:p>www.tscmusa.com<o:p></o:p><=
span style=3D'font-size:9.0pt'>***********************************<o=
:p></o:p>"Maintaining a hig=
her degree of excellence"<o:p></o:p>*****************************************<o:p></o:p>=
 <o:p></o:p></div></div><div><span=
style=3D'color:white'>__._,_.___<o:p></o:p></div></div></div><d=
iv>__,_._,___<o:p></o:p></=
span></div></div></body></html>
------=_NextPart_001_0029_01CBB733.09609210--

------=_NextPart_000_0028_01CBB733.09609210
Content-Type: image/jpeg;
 name="~WRD000.jpg"
Content-Transfer-Encoding: base64
Content-ID: <~WRD000.jpg>
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------=_NextPart_000_0028_01CBB733.09609210--
Received on Sat Mar 02 2024 - 00:57:18 CST

This archive was generated by hypermail 2.3.0 : Sat Mar 02 2024 - 01:11:44 CST