Jonne Eilimö | March 2, 2011 05:50 UTC |
0 comments |
source

Android Market was again hit by a malware threat. This time around it is rather big, since malware was found in 21 apps, and 50,000 possible infected users. The applications got access to basically everything stored on your phone. The malware was able to download more code over-the-air, so the possibilities for this little malware were nearly endless.
It is very alarming to see that the official Android Market has been hit with a massive malware attack like this. Previously we’ve only seen this happen on 3rd party markets for Android, but this time around it’s the real deal!
Android Police wrote the following:
I asked our resident hacker to take a look at the code himself, and he’s verified it does indeed root the user’s device via rageagainstthecage or exploid. But that’s just the tip of the iceberg: it does more than just yank IMEI and IMSI. There’s another APK hidden inside the code, and it steals nearly everything it can: product ID, model, partner (provider?), language, country, and userID. But that’s all child’s play; the true pièce de résistance is that it has the ability to download more code. In other words, there’s no way to know what the app does after it’s installed, and the possibilities are nearly endless.
All the applications with malware were from publisher Myournet:
- Falling Down
- Super Guitar Solo
- Super History Eraser
- Photo Editor
- Super Ringtone Maker
- Super Sex Positions
- Hot Sexy Videos
- Chess
- 下坠滚球_Falldown
- Hilton Sex Sound
- Screaming Sexy Japanese Girls
- Falling Ball Dodge
- Scientific Calculator
- Dice Roller
- 躲避弹球
- Advanced Currency Converter
- App Uninstaller
- 几何战机_PewPew
- Funny Paint
- Spider Man
- 蜘蛛侠
The good news? Google has already removed the 21 affected apps from the Android Market.