Attacks/Breaches
10/23/2008
02:35 AM
Connect Directly
RSS
E-Mail
50%
50%

Startup Promises to Monitor, Block Text Messaging

TextGuard says it can reduce the likelihood of data leaks from a wide variety of mobile devices

When it comes to mobile devices, two words can strike fear into the hearts of IT and security managers: "Text me." As the popularity of PDAs, cellphones, and smartphones grows, many administrators are worried that company secrets may be escaping through the unmonitored door of popular text messaging tools -- or that unwanted data and malware might be seeping in.

But a new company, TextGuard, thinks it may have developed an answer. A week ago, the startup quietly released a beta version of its eponymous application, which offers a method of blocking and monitoring text messages on Windows Mobile and Blackberry telephones.

The technology will help companies track the messages that are texted by their employees, while also helping them block spam and other attacks that might be delivered via popular SMS devices, TextGuard says. The technology also could allow parents to monitor and filter the text messages of their children, the company says.

"Every day, more and more companies are using text spam to advertise their products and messages, and unfortunately, many carriers are selling their phone lists to the highest bidder," says Todd Cohan, president of TextGuard. "This means that mobile telephones and devices have become a popular new target for spamming attacks, and there is now a great new need to protect them."

TextGuard says it has developed an application that allows users to block incoming text messages by simply entering a designated number on their phones. This approach "helps businesses monitor employee phones and lets company administrators lock devices down, monitor messages, archive messages, and keep harmful mobile spyware off company phones," the company says.

Among its capabilities, TextGuard can filter and search messages by subject or keyword, observers note. It can filter and search message files, as well as attachments, and it monitors all incoming and outgoing messages and archives texts on a secured server. In addition, it can block text and SMS spam.

Some observers expressed concern that TextGuard might also be used as spyware by the bad guys, if they can find simple methods to download the software to the phones of unsuspecting users. With TextGuard, a criminal could potentially eavesdrop on text messages and steal data from the end user.

But Cohan says he developed the software primarily to block intrusive incoming messages. In fact, in a newspaper report, Cohan said he came up with the idea after a woman he met online refused to stop text-messaging him.

"I remember feeling how intrusive texting could be and couldn't believe there was no way to stop someone from texting me," Cohan told the newspaper. With TextGuard, an employer or parent can log in from anywhere in the world and read all the messages and block texts from being sent or received, he said.

"Even when a sender is blocked, you can still see every message that was attempted to be sent to that number," Cohan said.

The software can be downloaded for a free 60-day trial. After that, it's priced at $11.95 a month.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
Partner Perspectives
What's This?
In a digital world inundated with advanced security threats, Intel Security seeks to transform how we live and work to keep our information secure. Through hardware and software development, Intel Security delivers robust solutions that integrate security into every layer of every digital device. In combining the security expertise of McAfee with the innovation, performance, and trust of Intel, this vision becomes a reality.

As we rely on technology to enhance our everyday and business life, we must too consider the security of the intellectual property and confidential data that is housed on these devices. As we increase the number of devices we use, we increase the number of gateways and opportunity for security threats. Intel Security takes the “security connected” approach to ensure that every device is secure, and that all security solutions are seamlessly integrated.
Featured Writers
White Papers
Cartoon
Current Issue
Dark Reading's October Tech Digest
Fast data analysis can stymie attacks and strengthen enterprise security. Does your team have the data smarts?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-0619
Published: 2014-10-23
Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the current working directory.

CVE-2014-2230
Published: 2014-10-23
Open redirect vulnerability in the header function in adclick.php in OpenX 2.8.10 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) dest parameter to adclick.php or (2) _maxdest parameter to ck.php.

CVE-2014-7281
Published: 2014-10-23
Cross-site request forgery (CSRF) vulnerability in Shenzhen Tenda Technology Tenda A32 Router with firmware 5.07.53_CN allows remote attackers to hijack the authentication of administrators for requests that reboot the device via a request to goform/SysToolReboot.

CVE-2014-7292
Published: 2014-10-23
Open redirect vulnerability in the Click-Through feature in Newtelligence dasBlog 2.1 (2.1.8102.813), 2.2 (2.2.8279.16125), and 2.3 (2.3.9074.18820) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to ct.ashx.

CVE-2014-8071
Published: 2014-10-23
Multiple cross-site scripting (XSS) vulnerabilities in OpenMRS 2.1 Standalone Edition allow remote attackers to inject arbitrary web script or HTML via the (1) givenName, (2) familyName, (3) address1, or (4) address2 parameter to registrationapp/registerPatient.page; the (5) comment parameter to all...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Follow Dark Reading editors into the field as they talk with noted experts from the security world.