Black Hat: RSA service to zap apps pretending to be from your company

LAS VEGAS -- RSA Wednesday introduced a service at the Black Hat Conference to monitor far and wide for signs of phony corporate mobile apps, and to work with Google Play, Apple iTunes and other major app stores to remove them quickly.

ARCHIVES: 10 scariest Black Hat and Defcon hacks

QUIZ: Black Hat's most notorious incidents

"These are apps that pretend to be connected to your organization," says Rachel Stockton, manager of RSA's data protection marketing group, about the Fraud Action Anti-Rogue Mobile App Service. "Hackers masquerade malicious apps under that identity."

RSA, the security division of EMC, will work with its customers to identify fake apps, which Stockton says can be complicated by the fact that in larger companies, separate divisions don't always inform each other about the apps they make available. But when a fake app is zeroed in on, RSA will work with several of the online apps stores to make sure it's removed. In addition to Google and Apple's apps stores, these include Amazon, Windows Mobile Market, AndroidZoom, Ovi, BlackBerry App World, Handster and GetJar.

The service, which starts at $3,000 per month, represents an expansion of RSA monitoring services, which also include anti-phishing and fraud intelligence.

Ellen Messmer is senior editor at Network World, an IDG publication and website, where she covers news and technology trends related to information security.

Read more about wide area network in Network World's Wide Area Network section.

Comments are now closed.
CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Web Malware Protection System (MPS)

Web Malware Protection System (MPS) stops Web-based attacks that traditional and next-generation firewalls, IPS, AV, and Web gateways miss.

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.