BEWARE - Rogue Android apps flood into alternative markets
According to security firm Webroot, a lot of effort has been put into these sites.
These well-crafted websites follow a similar layout; they have device reviews, app descriptions with screenshots, QR Codes and FAQs. So far, we've only found these websites aimed at Russian users, with the web pages written in Russian. The descriptions are similar to those in the Android Market and the screenshots appear to be taken from the market. We are discovering that this network of SMS Trojans is fairly large.
These Trojans, which Webroot is calling Android.SMS.FakeInst, come in a number of variants but all have one purpose - to scam unwitting users into sending three premium rate text messages in exchange for an app.
The catch ... most of the apps are either available for free from the Google Android Marketplace or are fake apps which don't work. These apps also ask for a whole range of permissions - READ_PHONE_STATE, SEND_SMS, RECEIVE_SMS and INTERNET - which would essentially given then access to the whole handset.
Be careful out there!
Related:
- Android handsets top hardware failures list
- Android Trojan records conversations, can send them to bad guys
- Report: Mobile malware to affect more than 1 in 20 devices within 12 to 24 months
- Stolen apps that root Android, steal data and open backdoors available for download from Google Market
- Owners to blame for latest Android malware