Via app stores
These malicious apps are found to gather account information from users' devices, including Google, Facebook, and Twitter account details. These apps use various social engineering techniques in order to appear legitimate on Google Play. As of this writing, the apps are still available on Google Play.
21 Jan 2014
Collects system information
This malware appears as several apps on Google Play.
The app names are: "Sexy Girls Video Hot Photo", "Arkadas Sevgili Bul SevgiLand", "Buscar Amigo Amor", "Scare Them! Funny Scary Joke". The apps have been downloaded and installed in more than 50,000 Android devices.
When users launch the app and unconsciously click the only image in it, the app gathers the following account information:
It sends the information to the following remote server:
Below are code screenshots of the malware behavior.
11 Apr 2014
Trend Micro Mobile Security Solution
Trend Micro Mobile Security Personal Edition protects Android smartphones and tablets from malicious and Trojanized applications. The App Scanner is free and detects malicious and Trojanized apps as they are downloaded, while SmartSurfing blocks malicious websites using your device's Android browser.