Jesse D’Aguanno, a security consultant with Praetorian Global, supposedly has developed hack to exploit the trust relationship between a BlackBerry and a company’s internal server which allows the data connection between the two to be compromised.
The BlackBerry hack, called BBProxy, has to be placed on a Blackberry either physically or as a Trojan horse delivered by e-mail. Once installed, it causes the Blackberry to call back to the attacker’s system in the background, opening a communications channel between the attacker and the company’s internal network.
D’Aguanno, who has already met with Research in Motion, plans to release BBProxy in a week or so. RIM has already released two papers about the security threat in anticipation to D’Aguanno’s presentation at the DefCon hacker convention.