Feeds

Navy devs cook up Android spyware to map your location - in 3D

Smartphone snooper stakes out the joint as you move around the room

HP ProLiant Gen8: Integrated lifecycle automation

Indiana students working with the US Navy have demonstrated malware capable of mapping a room and creating a 3D-navigable space to help information thieves find what they're looking for.

The Indiana University team, which includes a representative from the Naval Surface Warfare Center, created PlaceRaider – smartphone software which covertly takes snapshots every two seconds and then runs those snaps through existing analysis software to create a 3D model, which enabled users to find bank details, snatchable property and even when the residents were likely to be out.

The idea is that the software, called PlaceRaider, could be embedded into any of the camera-enhancement applications already available in the mobile app marketplaces, providing it with all the permissions it needs to carry out the attack. Once installed, PlaceRaider runs in the background, covertly taking snaps opportunistically as the user moves around the room with the phone. The malware mutes the volume before every snap to prevent the shutter sounding. Along with the pics, the camera records its orientation to help it build the 3D model later.

Obviously useless snaps are then discarded – which amounted to almost three-quarters of them in testing – and the rest are sent back to the miscreant along with the orientation data. All that data is then run through the Bundler toolkit - a stitching package following on from Microsoft's legendary Photosynth application, which glues together unrelated photos of the same subject. The result of that is run though the open-source Patch-based Multi-view Stereo Software to create a 3D navigable space.

It's not quite that easy, in the detailed write-up (PDF, detailed and well written) the team points out that Photosynth can rely on most pictures being horizontally aligned (as they come from Flickr, or are at least deliberately taken) while their samples were at all sorts of angles though they did have the orientation data to help address that.

The point of the process was to make it easier for the miscreant to find stuff worth seeing, so the team set a room with a decent amount of data on display (cheques on the desk, a wall calendar carefully noting foreign travel, and so forth). Twenty students were then asked to complete normal mobile-phone takes on an infected HTC Amaze, without knowing the true purpose.

Once the data had been gathered, another group of students were asked to see if the data contained anything useful, with half being given the raw images (between 800 and 1,400 of them per sample) and the other half getting the 3D experience. Unsurprisingly those able to visualise the space made a much better job of finding the data, showing the analysis was worthwhile.

That's nothing to panic about right now, the process was complicated and the threat indeterminate (take a look around you now, decide what in the vicinity would be of value to a thief, and realise the threat isn't really credible just yet), but that will change as the processing power of the phone increases (enabling it to filter out more information) and more bandwidth becomes available.

It was lack of bandwidth which prevented the team from using video, but the implications are obvious. Web cams have been hijacked many times, but they generally point in one direction and thus have limited value for snooping. A mobile-phone camera gets a decent sweep of the room every time a call is answered, increasing the risk hugely.

The PlaceRaider team recommend removing the ability to mute the shutter sound (which they do by reducing the volume, as Android already insists in playing it every time a photo is taken) and limiting access to orientation data, though they also admit that a PlaceRaider-detector would be trivial to write and that anti-malware software might become increasingly necessary as the cameras we carry around start being used against us. ®

Top three mobile application threats

More from The Register

next story
Apple fanbois SCREAM as update BRICKS their Macbook Airs
Ragegasm spills over as firmware upgrade kills machines
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
NO MORE ALL CAPS and other pleasures of Visual Studio 14
Unpicking a packed preview that breaks down ASP.NET
Captain Kirk sets phaser to SLAUGHTER after trying new Facebook app
William Shatner less-than-impressed by Zuck's celebrity-only app
Microsoft takes on Chromebook with low-cost Windows laptops
Redmond's chief salesman: We're taking 'hard' decisions
Cheer up, Nokia fans. It can start making mobes again in 18 months
The real winner of the Nokia sale is *drumroll* ... Nokia
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
EU dons gloves, pokes Google's deals with Android mobe makers
El Reg cops a squint at investigatory letters
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.