Specifications

Attack Surface Analysis of BlackBerry Devices
SMS Backdoor
A signed malicious application could use SMS as a command and control channel for a backdoor. It could
send and receive messages; steal or modify sensitive data and open TCP/IP connections.
Incoming SMS messages could be monitored for keywords or a particular originating phone number. These
messages could then be interpreted as commands to perform a variety of actions on behalf of the attacker.
These actions would still be subject to the same constraints as any action carried out by an application.
Therefore the user would still be prompted in the usual manner before sensitive actions could be carried
out, and the set of possible actions would be governed by whether the malicious application was signed or
not, as well as any Application Permissions or Device Firewall which may be in place.
Mitigation
You can set the following options to mitigate the attacks outlined above. See Mitigation Strategies for more
information.
Premium Rate Scam
SMS Interception
SMS Backdoor
20
IT Policy "Allow SMS" = False
Application Controls "External Network Connections" = Not Permitted
Device Firewall Status = Enabled
Application Permissions Connections > Carrier Internet = Deny
IT Policy "Allow SMS" = False
"Firewall Block Incoming Messages" = True
Application Controls "External Network Connections" = Not Permitted
Device Firewall Status = Enabled
"Block Incoming Messages" > SMS = Ticked
Application Permissions Connections > Carrier Internet = Deny
IT Policy "Allow SMS" = False "
Firewall Block Incoming Messages" = True
Application Controls "External Network Connections" = Not Permitted
Device Firewall Status = Enabled
"Block Incoming Messages" > SMS = Ticked
Application Permissions Connections > Carrier Internet = Deny