Join the Talk | 70,031 members - 273,149 posts Advertise | Have a scoop? Tip us!

The T-Mobile G1 gets hijacked!

24 November 2008 by Staff Editor


Worth Reading?

NoYes

0 [4 votes]


The latest update that Google pushed out (RC30) is suppose to fix the browser hijacker security flaw that was originally reported in Android software. Well it appears that Google is going back to the drawing board because our users have been hijacked!

Our users are reporting an attack when they try to visit their Yahoo home page. Instead of going to their homepage it redirects them to the antivirus download page for whatever reason. While we are unsure what is causing this, it appears it just started happening yesterday. There is no threat to any information in the applications other than the web browser.

Google limits the browser so that no hijackers can gain access to personal information in other applications such as BioWallet. Google has not made any comments on this issue thus far. There is development on antivirus applications for Google’s Android and the G1 going on right now.  How many of our members are experiencing similar problems?  Will anyone be purchasing antivirus software for their G1 now to gain some peace of mind?

  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google Bookmarks
  • Slashdot
  • SphereIt
  • Technorati
  • blogmarks
  • Blogosphere News
  • email
  • NewsVine
  • StumbleUpon
  • FriendFeed
  • Live
  • Reddit
  • Twitter
  • Wikio
  1. I already bought and downloaded an antivirus for my g1 like 2 weeks ago from handango..its always good to be xtra protected these days u just never know. its called SmobileAV and costs 9.99. for 1 year.
  2. I seriously doubt this was a G1 or Android exploit. No one was able to reliably (credibly) recreate it over WiFi. Seemed to be T-Mobile's servers. At any rate, wherever the problem arose, the company responsible needs to come forward immediately and acknowledge it and let us know it has been fixed.
  3. Oh wow this happened to me the other day but I just thought it was spam or something (stupid of me I know)
    So what does this mean exactly? The only valuable information I have on my phone are my passwords to my online accounts with sites like Facebook, Myspace, etc.
    I don't have any valuable information so it doesn't really matter right?
  4. Thats BS. Google better make things right before their G1 becomes a laughing stock.
  5. Just go to mail.yahoo.com and u circumvent the affected Yahoo site (this works and unless u wanna. Something else on the main Yahoo page, it'll work for u too). Good option until problem is fixed at least. I'm out!
  6. hope this fix this asap.
  7. People:

    It is a gateway problem... epc.tmobile.com.

    I spammed my user agent as android on my iPhone using epc.tmobile.com as my gateway, and got the same browser hijacks that G1 users are getting.

    It's not Google's fault, it's T-Mobile's.
  8. Purchase antivirus software?!? It should should come with the phone! Especially if google is unable to stop the threats with there updates.
  9. The problem must already be fixed on the Tmo side, cuz I go straight to Yahoo.com over WiFi and EDGE. Or do I? hahaha

    No, seriously. All you spazzing over Google's f'ing this and that up ought to look at Microsoft's track record on security flaws. And look what we have now, Vista the most paranoid operating system in history.
  10. why should google give the antivirus i mean it would be cool, but tell me does windows come with antivirus protection?? NO, yes there's free antivirus so its not their fault. be glad the os is free unlike others.
  11. I just wanted to calm people down. From what I have read it seems clear that the browser has been hijacked (I haven't researched into the problem enough to say if it was Google's or TMobile's fault). But as the article wisely states, the Android security system isolates the processes so they cannot access other data in the phone and that way the damage is minimized.

    FWIW, even if it had access to BioWallet data they still would be completly safe due to the use of strong encryption techniques combined with biometric authentication (well, unless you have something that is interesting enough for the NSA )

    Jose Luis
    BioWallet Team.
  12. Strange, i switch to both the wap apn and internet3 apn and the problem goes away.
  13. Not sure if this is related but yesterday my G1 kept saying "connection error" when connecting to my yahoo email. It is still doing it today too. Funny thing is this morning when i checked it showed new email from overnight in my inbox, but gives me the connection error when i try to view them...now its back to not even being able to check my yahoo email again. WTF?!
  14. Why would you want an Antivirus for your G1? How is that going to solve any problems derive from this vulnerability.

    The only reason why windows needs anti-virus is because all files in the system are accessible to all users (this a generalization, because later versions of windows can act a bit like traditional unix and make every user its little world).

    Android is no exception to this unix tradition, and as a matter of fact every process is isolated - not only all the processes of a user, like in traditional unix).

    If most users in Linux and Mac OS/X don't need antivirus, why would anyone want antivirus for android?

    Just a thought!

    PS> Clam AV is the big exception, but this unix antivirus is used mostly for unix user's that have to work in a windows network, or unix mail servers that will deliver email to windows machines.
  15. What bothers me the most (just besides the shock of being hijacked!) is
    the lack of response when I called to report it two nights ago. It took me THREE calls just to get someone to take me seriously (and not accidently hang up on me.) And that was partly because I had found others on this forum reporting the same issues. I kept being told no one else had called tmobile with this (like that made my experience any less true.)

    Meantime, tmo finally logged a trouble ticket, but have I heard back? NO.
    And I finally found a place to escalate with Google online... I had an email yesterday asking if things were better.... but nothing else.

    NO one has an explanation or comforting feedback. I'd really like to hear something like - we caught it! or Wont happen again!

    I feel pretty darn abandoned. And considering it's not the best in terms of access or email functionality (I don't use gmail)... customer service is one place I would expect them to pick up the slack.

    Yup. You could say I'm just a bit disappointed.
  16. Quote:
    Originally Posted by ohrock View Post
    Why would you want an Antivirus for your G1? How is that going to solve any problems derive from this vulnerability.

    The only reason why windows needs anti-virus is because all files in the system are accessible to all users (this a generalization, because later versions of windows can act a bit like traditional unix and make every user its little world).

    Android is no exception to this unix tradition, and as a matter of fact every process is isolated - not only all the processes of a user, like in traditional unix).

    If most users in Linux and Mac OS/X don't need antivirus, why would anyone want antivirus for android?

    Just a thought!

    PS> Clam AV is the big exception, but this unix antivirus is used mostly for unix user's that have to work in a windows network, or unix mail servers that will deliver email to windows machines.
    I haven't used an anti-virus on Windows in years, it's not necessary

    99% of cases, the virus is on a computer because someone downloaded it. Be careful, use common sense, and there's a very, very small chance that something will magically appear on your PC.

    As commented above: an antivirus wouldn't protect you from this. It's NOT a virus.
  17. KGirl17, you bought a G1. The very first piece of technology that runs Android.

    As an early adopter, you should be happy of having to deal with glitches...

    At least in the case of the Android platform, if you want to do something about it, you can even participate in the process of fixing the Glitches! (The Android is an Open Source Project)
  18. WOW....this is pretty poor reporting and could incite a needless scare. I like others have went to they Yahoo site on my G1 using WiFi and got there just fine. If the browser was hijacked it would be hijacked no matter the connection type to the internet. What some have said is that the TMO DNS seems to be pointing to the wrong site.

    There was a big issue over a major DNS vulnerability this summer that would allow hackers to poison a DNS. There were some major companies that DID eventually have their poisoned and sent people to the wrong pages. It looks like this may have happened to TMO and has no bearings on the security of Android. Please at least do some research on this issue before throwing Google and Android under the bus regarding security.

    The idea of Android Anti-virus is somewhat ridiculous as Android is built on Linux and inherits the things that make virus infections very hard to almost impossible.
  19. I dont know if its just me but when i go to my tmobile and try to to manage my favs i get a message saying SAFARI IS NOT CURRENTLY SUPPORTED FOR MY FAVS. Can someone tell me whats going on i though safari was apples brower?
  20. G1andonly

    Safari and the Android browser are both built from and open source project called webkit. I'm assuming that somehow webkit is detected by some websites and assumed to be Safari. I have visited a couple of sites and have had that happen. Thats just off the top of my head however...there may be more to it.
  21. i noticed the same thing happened to me with google where if i clicked on view in "desktop" it would direct me to i- google or gmail and sometimes something different... i found that if you went to settings > applications > manage applications, and clicked on browser, and cleared data. it seemed to help. it saves me alot of space and problems
  22. thank you for the tip
Join AndroidCommunity Forums

Android Phone Accessories


T-Mobile G1 Accessories
Palm Pre Accessories
iPod Touch Accessories
Advertise with SlashGear
Free Tech Support at SlashGear Forums

© 2008 Android Community. Part of R3 Media Network

Contact | Advertising | About Us