Data-stealing Android Trojan masquerades as greeting-sending app
Posted on 29.12.2011
Text messages have largely replaced seasonal (and non) greeting cards, and there are mobile apps out there that let you send prewritten witty/sweet messages to friends and family.

But there are also some that pretend to do that, and F-Secure researchers have recently spotted a Trojan targeting Chinese Android users that masquerades as just that type of app.


Dubbed AdBoo, the app seemingly lets users choose a message template (jokes, New Year wishes, and more), then asks them to choose the contact to whom it will be sent. But it doesn't actually send the message - a dialog box notifying them of a "Sending Fail" pops up instead.

In the background, the Trojan harvests information such as phone model and number, Android version and IMEI number and sends it to a remote server.

It is also interesting to note that the researchers believe that the developer of this app is also the one that developed another recently spotted Android Trojan that sends SMS messages to premium-rate numbers, as both pieces of malware are signed with the same certificate.







Spotlight

Whitepaper: 10 things your next firewall must do

For enterprises looking at Next-Generation Firewalls, the most important consideration is: will this new technology empower your security teams to securely enable applications to the benefit of the organization? It's not about blocking applications, but safely enabling them.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Fri, May 29th
    COPYRIGHT 1998-2015 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //