[ Security Alert ] 24 February, 2012 13:42

    According to the data collected by AegisLab, from this Feburary, there are malicious web links which want to pretend as Facebook image links with naming like "hxxp://xxx.xxx/album.php?Facebook.com-IMGxxxx.JPG". The user might be not awared, then clicked and installed.


Once clicked, a ZIP file was download, which contains the malware executable.

Related variants collected by AegisLab is around 243, please remember to download latest signature definition to block this malware.


[ Product News ] 20 February, 2012 11:42

    We are glad to announce the new version 1.0.5 of AegisLab Antivirus Free is available on Google Android Market right now. In this version, two new features are provided.

  • Detect CarrierIQ.
  • New application categories: Porn & Violence.

    The newly added application categories can help the parent to take care the mobile app usage of their family members.

    And of course we also did some memory optimization in this version to have better user experience and stability.

    Have fun with our app!

 By AegisLab

[ Security Alert ] 10 February, 2012 14:23

    According to Xuxian Jiang and Symantec report, a botnet contains hundreds of thousands Android devices appears. An Android malware called "RootSmart" trojaned itself as a system tool apk as the following figure 1, once you installed the application, it works fine but will then stealthily fetch a GingerBreak root exploit (affecting Android devices with versions less than 2.3.3 and 3.0), try to escalate the privilede to root, and finally connect to the botnet. GingerMaster was the first malware to utilize this vulnerability which PoC was published as RootStrap by Jon Oberheide in SummerCon 2010.


              Figure 1: RootSmart is running


Since 6 Feb, AegisLab Antivirus Free/Elite can detect this Android malware(Figure 2). We suggest you to install and don't forget to update the latest signature periodically.


        Figure 2: AegisLab Antivirus detected


By AegisLab 

[ Activity ] 02 February, 2012 17:34


Welcome to Visit AegisLab/Lionic at RSA 2012!

     The RSA 2012 will be held in San Francisco during 27th Feb. to 2nd Mar. 2012. We are preparing ourselves to deliver the demos, giveaways and our enthusiasm. We are looking forward to this great show.

     We are glad to invite you to visit us, please come to booth #2722 and check the floorplan. Please contact us to let us know if you will be at the show and would like to schedule a meeting! See you there!

By AegisLab