Attacks/Breaches
10/23/2008
02:35 AM
50%
50%

Startup Promises to Monitor, Block Text Messaging

TextGuard says it can reduce the likelihood of data leaks from a wide variety of mobile devices

When it comes to mobile devices, two words can strike fear into the hearts of IT and security managers: "Text me." As the popularity of PDAs, cellphones, and smartphones grows, many administrators are worried that company secrets may be escaping through the unmonitored door of popular text messaging tools -- or that unwanted data and malware might be seeping in.

But a new company, TextGuard, thinks it may have developed an answer. A week ago, the startup quietly released a beta version of its eponymous application, which offers a method of blocking and monitoring text messages on Windows Mobile and Blackberry telephones.

The technology will help companies track the messages that are texted by their employees, while also helping them block spam and other attacks that might be delivered via popular SMS devices, TextGuard says. The technology also could allow parents to monitor and filter the text messages of their children, the company says.

"Every day, more and more companies are using text spam to advertise their products and messages, and unfortunately, many carriers are selling their phone lists to the highest bidder," says Todd Cohan, president of TextGuard. "This means that mobile telephones and devices have become a popular new target for spamming attacks, and there is now a great new need to protect them."

TextGuard says it has developed an application that allows users to block incoming text messages by simply entering a designated number on their phones. This approach "helps businesses monitor employee phones and lets company administrators lock devices down, monitor messages, archive messages, and keep harmful mobile spyware off company phones," the company says.

Among its capabilities, TextGuard can filter and search messages by subject or keyword, observers note. It can filter and search message files, as well as attachments, and it monitors all incoming and outgoing messages and archives texts on a secured server. In addition, it can block text and SMS spam.

Some observers expressed concern that TextGuard might also be used as spyware by the bad guys, if they can find simple methods to download the software to the phones of unsuspecting users. With TextGuard, a criminal could potentially eavesdrop on text messages and steal data from the end user.

But Cohan says he developed the software primarily to block intrusive incoming messages. In fact, in a newspaper report, Cohan said he came up with the idea after a woman he met online refused to stop text-messaging him.

"I remember feeling how intrusive texting could be and couldn't believe there was no way to stop someone from texting me," Cohan told the newspaper. With TextGuard, an employer or parent can log in from anywhere in the world and read all the messages and block texts from being sent or received, he said.

"Even when a sender is blocked, you can still see every message that was attempted to be sent to that number," Cohan said.

The software can be downloaded for a free 60-day trial. After that, it's priced at $11.95 a month.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2011-4403
Published: 2015-04-24
Multiple cross-site request forgery (CSRF) vulnerabilities in Zen Cart 1.3.9h allow remote attackers to hijack the authentication of administrators for requests that (1) delete a product via a delete_product_confirm action to product.php or (2) disable a product via a setflag action to categories.ph...

CVE-2012-2930
Published: 2015-04-24
Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user via an adduser action to admin/index.php or (2) conduct static PHP code injection attacks in .htusers...

CVE-2012-2932
Published: 2015-04-24
Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the (1) selitems[] parameter in a copy, (2) chmod, or (3) arch action to admin/index.php or (4) searchitem parameter in a search action to admin/...

CVE-2012-5451
Published: 2015-04-24
Multiple stack-based buffer overflows in HttpUtils.dll in TVMOBiLi before 2.1.0.3974 allow remote attackers to cause a denial of service (tvMobiliService service crash) via a long string in a (1) GET or (2) HEAD request to TCP port 30888.

CVE-2015-0297
Published: 2015-04-24
Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methos via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager.

Dark Reading Radio
Archived Dark Reading Radio
Join security and risk expert John Pironti and Dark Reading Editor-in-Chief Tim Wilson for a live online discussion of the sea-changing shift in security strategy and the many ways it is affecting IT and business.