Feeds

Navy devs cook up Android spyware to map your location - in 3D

Smartphone snooper stakes out the joint as you move around the room

Choosing a cloud hosting partner with confidence

Indiana students working with the US Navy have demonstrated malware capable of mapping a room and creating a 3D-navigable space to help information thieves find what they're looking for.

The Indiana University team, which includes a representative from the Naval Surface Warfare Center, created PlaceRaider – smartphone software which covertly takes snapshots every two seconds and then runs those snaps through existing analysis software to create a 3D model, which enabled users to find bank details, snatchable property and even when the residents were likely to be out.

The idea is that the software, called PlaceRaider, could be embedded into any of the camera-enhancement applications already available in the mobile app marketplaces, providing it with all the permissions it needs to carry out the attack. Once installed, PlaceRaider runs in the background, covertly taking snaps opportunistically as the user moves around the room with the phone. The malware mutes the volume before every snap to prevent the shutter sounding. Along with the pics, the camera records its orientation to help it build the 3D model later.

Obviously useless snaps are then discarded – which amounted to almost three-quarters of them in testing – and the rest are sent back to the miscreant along with the orientation data. All that data is then run through the Bundler toolkit - a stitching package following on from Microsoft's legendary Photosynth application, which glues together unrelated photos of the same subject. The result of that is run though the open-source Patch-based Multi-view Stereo Software to create a 3D navigable space.

It's not quite that easy, in the detailed write-up (PDF, detailed and well written) the team points out that Photosynth can rely on most pictures being horizontally aligned (as they come from Flickr, or are at least deliberately taken) while their samples were at all sorts of angles though they did have the orientation data to help address that.

The point of the process was to make it easier for the miscreant to find stuff worth seeing, so the team set a room with a decent amount of data on display (cheques on the desk, a wall calendar carefully noting foreign travel, and so forth). Twenty students were then asked to complete normal mobile-phone takes on an infected HTC Amaze, without knowing the true purpose.

Once the data had been gathered, another group of students were asked to see if the data contained anything useful, with half being given the raw images (between 800 and 1,400 of them per sample) and the other half getting the 3D experience. Unsurprisingly those able to visualise the space made a much better job of finding the data, showing the analysis was worthwhile.

That's nothing to panic about right now, the process was complicated and the threat indeterminate (take a look around you now, decide what in the vicinity would be of value to a thief, and realise the threat isn't really credible just yet), but that will change as the processing power of the phone increases (enabling it to filter out more information) and more bandwidth becomes available.

It was lack of bandwidth which prevented the team from using video, but the implications are obvious. Web cams have been hijacked many times, but they generally point in one direction and thus have limited value for snooping. A mobile-phone camera gets a decent sweep of the room every time a call is answered, increasing the risk hugely.

The PlaceRaider team recommend removing the ability to mute the shutter sound (which they do by reducing the volume, as Android already insists in playing it every time a photo is taken) and limiting access to orientation data, though they also admit that a PlaceRaider-detector would be trivial to write and that anti-malware software might become increasingly necessary as the cameras we carry around start being used against us. ®

Security for virtualized datacentres

More from The Register

next story
Microsoft to bake Skype into IE, without plugins
Redmond thinks the Object Real-Time Communications API for WebRTC is ready to roll
Microsoft promises Windows 10 will mean two-factor auth for all
Sneak peek at security features Redmond's baking into new OS
Mozilla: Spidermonkey ATE Apple's JavaScriptCore, THRASHED Google V8
Moz man claims the win on rivals' own benchmarks
FTDI yanks chip-bricking driver from Windows Update, vows to fight on
Next driver to battle fake chips with 'non-invasive' methods
PEAK APPLE: iOS 8 is least popular Cupertino mobile OS in all of HUMAN HISTORY
'Nerd release' finally staggers past 50 per cent adoption
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
Ubuntu 14.10 tries pulling a Steve Ballmer on cloudy offerings
Oi, Windows, centOS and openSUSE – behave, we're all friends here
Was ist das? Eine neue Suse Linux Enterprise? Ausgezeichnet!
Version 12 first major-number Suse release since 2009
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The hidden costs of self-signed SSL certificates
Exploring the true TCO for self-signed SSL certificates, including a side-by-side comparison of a self-signed architecture versus working with a third-party SSL vendor.