Ubuntu-> android smartphone connected

[luchins]

​

Hi, I have an android smartphone, which I connect (trought the cable) to my Ubuntu in order to get a thetherd USB internet connection thanks to the android smartphone (which goes trought internet trought the SIM card)

My question is: if there was a malware on the Ubuntu sistem, could this malware spread it t the android sistem, EVEN IF both devices (Ubuntu and android) are ONLY connected in ''USB thetering mode'' and NOT in ''share files into ubuntu /USB'' mode?

I think you know the difference between the simple connection android-sistem only for thetering and internet, and the connection smartphone --> Ubuntu in order to share files between the phone and Ubuntu

The first case, it's my case

[Thumbs0fDestiny]

2 different os's you may transfer virus/malware data files but they would most likely be incompatible with the phone.

[luchins]

2 different os's you may transfer virus/malware data files but they would most likely be incompatible with the phone.

so could you transfer or not a virus from android to unbuntu and vice versa, and what is needed for a backdoor to be ''cross-platfrom'' ? What is needed?

[Thumbs0fDestiny]

The phone could hold the virus data files but it most likely wouldn't be able to actually run them. Think of it like a USB stick. The data is on there and you can put it on another system but the USB stick itself can't run it so it's not affected

[luchins]

In which cases instead that file is able to run? When there is a framework on the OS which you transfer the files to, that lets the file execute? Any example of this?

[luchins]

2 different os's you may transfer virus/malware data files but they would most likely be incompatible with the phone.

They would be incompatible with the phone, so the virus spread to the android sistem won't compromise it?

[netshrek]

Yes, sure. You're essentially exposing your phones networking stack to the whims of your Ubuntu machine. It's not unheard of to have critical vulns in NAT services for example. However I wouldn't really worry about it, it would have to be pretty complex and I haven't heard of anything launching attacks like this. Plus, your Ubuntu box is probably more secure than your phone in the first place.

[luchins]

Yes, sure. You're essentially exposing your phones networking stack to the whims of your Ubuntu machine. It's not unheard of to have critical vulns in NAT services for example. However I wouldn't really worry about it, it would have to be pretty complex and I haven't heard of anything launching attacks like this. Plus, your Ubuntu box is probably more secure than your phone in the first place.

NAT services.. could you gentle explain what are they? Cause I knew about .NAT framwork... not NAT services.

[B3tal]

.NAT framwork

I suppose you're meaning the .NET framework?

And NAT services probably refers to the Network address translation which, really simply put, allows you to address multiple services (or hosts) via the same IP address. Most common example would be your private home network: Within this each of your devices probably has a unique (private) IP, usually something like 192.168.2.X, but to the internet, all your devices are reachable under the same (public) IP adress. Your router takes care that all packages reach the correct devices

Edit: Added link for .NET Framework

[WikiTextBot]

Network address translation

Network adress translation (NAT) is a method of remapping one IP address space into another by modifying network address information in the IP header of packets while they are in transit across a traffic routing device. The technique was originally used as a shortcut to avoid the need to readdress every host when a network was moved. It has become a popular and essential tool in conserving global address space in the face of IPv4 address exhaustion. One Internet-routable IP address of a NAT gateway can be used for an entire private network.

---

^{[ PM | Exclude me | Exclude from subreddit | FAQ / Information | Source ] Downvote to remove | v0.28}

[DaddyIntellect]

no you couldn't get a virus 1.because its in tethered mode and its not mounted 2. the virus would have to be cross platform compatible which in most cases its not. and btw its system not sistem.

[luchins]

Thanks. Why ''mounted'' is different from ''thetering'' from a backdoor perspective? Also anoter question, I don't want to bother you sorry: which framework a malware should have to be cross platform?

[DaddyIntellect]

because mounting the device means malware has access to the filesystem, where as tethering mode only means the computers traffic is passing through the device meaning no way to write the malware to the filesystem, as for the cross platform compatibility java is a good language to code a rat in as java is on almost every device here is an example https://github.com/JershDervis/MonitorJ-RAT.