[Chinese]More malware targeting Android 惡意程式盜取密碼以及發送高價加值簡訊

我們一直強調簡訊SMS安全的重要性以及如何運用Secure SMS與家人/同事/夥伴/客戶等安全溝通，保護您的隱私以及重要訊息內容不外露。如果您還是沒有被說服，那我們所擔心的事已經在真實世界上演了，看看這一篇昨天(July 12) cnet news 上發表的一篇文章吧!

文章內容節錄如後，主要提到2個重點:1. 惡意程式可讀取你的簡訊並且發送加值簡訊(Premium SMS) 2. 惡意程式讀取你收到的銀行一次性登入認證密碼(One Time OTA SMS PIN)。 若有興趣看原文的可以跳轉後在此看原文 http://news.cnet.com/8301-27080_3-20078606-245/more-malware-targeting-android/?tag=mncol;title

Researchers are reporting the discovery of malware targeting Android devices, specifically a new variant of the DroidDream Trojan found in apps that Google removed from the Android Market, as well as malware on alternative app markets in China designed to run up premium SMS bills, and a data-stealing Trojan that targets one-time bank SMS pass codes. .......

加值簡訊(Premium SMS)會讓你收到帳單看到帳單金額手軟，但是如果是銀行轉帳的認證密碼(One-Time OTA SMS)或是你的登入密碼呢?

不要猶豫，小花費大保障，趕快加入使用Secure SMS的行列保護您的隱私吧!!!!

Why should I encrypt content of my short message for sake of enhance privacy

People were asking why do you bother to encrypt content of your message. Shouldn't the mobile network (either 2G or 3G) be quite secure for transmitting my message over the air (OTA) in peer-to-peer communication?

Well, this is a good question. But, do you know most (if not all) of short message center (a.k.a. SMSC) of service provider operate in a kind of store-and-forward mechanism that means your message is kept in its database / internal store for handling. Technically speaking, for anyone with proper permission or someone with domain knowledge and equipped with proper tools they might be able to read your message without your awareness.

Therefore, this is the solely reason behind for the birth of "Secure SMS" application for Android. For those of you paranoid who ask for a higher level of privacy control and or for corporate who want to send one time password / sensitive information OTA to clients, Secure SMS is the right answer to your concern.

You can download it from Android Market at https://market.android.com/details?id=com.ngnlive.plmn.securesms

For a how-to guide of the application, you might want to read this article at http://ngnlive.blogspot.com/2011/05/englishhow-to-use-secure-sms.html too.

[Chinese]Secure SMS簡介

Secure SMS是一個客戶端加密/解密應用程序，允許想要一點隱私的用戶透過短信溝通，程式先對他們要發出的信息內容進行加密，然後將它發送出去給收件人。 只有正確解密碼的簡訊收件人能夠解密原來加密的短信和讀取信息。
程式特色亮點包括
1。 點對點通信等安全信息的AES - 128加密/解密機制
2。 增強隱私控制，可從終端設備默認收件箱中刪除收到信息
3。 為每個聯絡人設定單獨的加解密密碼或默認鍵為所有人使用同一加解密碼（可啟用設置選項）
4。 設定個人密碼（PIN），用於訪問瀏覽頁面（可啟用設置選項）
5。 設定個人密碼（PIN），用於訪問設置頁面（可啟用設置選項）
6。 設定個人密碼（PIN），用於訪問密鑰管理頁面（可啟用設置選項）
7。 在狀態欄通知收到安全短消息以及一鍵點擊查看
應用程式的屏幕截圖如下

解密加密的SMS（短消息）瀏覽頁面

您可以通過最流行的PayPal服務購買儲值點數（充值點）使用服務。

您可以從Android Market通過網址https://market.android.com/details?id=com.ngnlive.plmn.securesms 獲得程式資訊
請不要猶豫，請為我們的應用程序在Android Market評分5分，您也可以到我們的Facebook臉書粉絲網頁說聲"讚" http://goo.gl/Dwm5S 。
若您想要了解更多有關AES - 128細節，您可以從Wikipedia網站取得相關資訊http://en.wikipedia.org/wiki/Advanced_Encryption_Standard

-------------------------------------------
telecom in the cloud - we provide telecom-like services in the cloud

[English]How-to use Secure SMS

First of all, you have to define encrypt/decrypt key pair for people you want to exchange secure message on keys management page.
Assuming your mobile no. is 098zzzzzzz and you want to exchange secure message with a contact whose mobile is 0935xxxxxx
1. Click on the keys mgt. from menu page
2. Type in this person's mobile no. in Contact mobile file
3. Random type in a string used for encryption key for your outgoing message to this contact on "Encryption key" field
4. Type in the decrypt string given by this contact (refer explanations in next step) which will be used to decode message from him/her on the "Decrypt key" field

On your counterpart's phone (contact people with the mobile no. 0935xxxxxx mentioned in earlier steps), repeat the same procedures for keys exchange definition as below
As you can see, he/she define your mobile (098zzzzzzz) in his/her keys mgt. page where
a. Key value defined in this contact's "Encryption key" field is the same value as you entered in your "Decrypt key" field (refer above screen)
b. Key value defined in this contact's "Decrypt key" field is the same value as you entered in your "Encrypt key" field (refer above screen)

Don't forget to click on the "Add xxx" or "Update xxx" button to save the keys definition for later use after finished keys definition.
Once done, either one can send secure message to his/her counterpart using the "send" function on main screen.

Shortly after, the targeted recipient will get a notification on his/her phone's status bar
Slide down the notification page, you will see a message from Secure SMS.

He/she can click on the notification to view the decrypted encrypted message from sender immediately.
Note for message with incorrect decrypt key defined, you will only see original encrypted message instead as demonstrated in message ID 1.

1. assistant sending confidential or classified information to boss
2. lovers exchange messages and want to keep those messages confidential inside the two only
3. bank / portal send one time OTA password to clients enhance security
4. business partners exchange confidential information or price quote
... and lots more we believe your will have your own creative way of using it.

Well, that's basically all of what you need to get started. Have fun and hope you like our work.

Please don't hesitate to rate it as 5-star for our application in Android Market at https://market.android.com/details?id=com.ngnlive.plmn.securesms and "like" it on our Facebook fans' page at http://goo.gl/Dwm5S.

A big thanks to you in advance!

[English]What's Secure SMS

Secure SMS is a client-side encrypt/decrypt application which allows user who wants a bit of privacy on SMS communication to encrypt their message content before sending it out to people. Only targeted recipient who has the correct decrypt key would be able to decrypt the encrypted SMS and read the message.
Feature highlight of the application includes
1. peer-to-peer secure message communication by AES-128 encrypt/decrypt mechanism
2. remove of messages from device's default inbox for enhanced privacy control
3. separate keys for each individual contact or a default key for all (can be enabled on settings option)
4. password (PIN) required for accessing message view page (can be enabled on settings option)
5. password (PIN) required for accessing settings page (can be enabled on settings option)
6. password (PIN) required for accessing keys management page (can be enabled on settings option)
7. incoming secure message notification on status bar and one click to view
Screen shots of the application below

Decrypt of encrypted SMS (short message) on view page

You can purchase credits (Top Up points) via most popular PayPal service for use in the application.

You can download the application from Android Market at https://market.android.com/details?id=com.ngnlive.plmn.securesms
Please don't hesitate to rate it as 5-star for our application in Android Market at https://market.android.com/details?id=com.ngnlive.plmn.securesms and you can "like" it on our Facebook fans' page at http://goo.gl/Dwm5S.
For those of you who want to know more about AES-128, you can check it out from WIKIPEDIA web site at http://en.wikipedia.org/wiki/Advanced_Encryption_Standard