Android malware scolds and shames users

Stephen Withers
Friday, 01 April 2011 09:30

Your IT - Mobility

An Android Trojan dubbed Walkinwat sends an SMS to all contacts stored on the phone, and sends personal data to a remote server.

Symantec reports that a fake version of an Android application exposes users to ridicule from their friends, family and business contacts.

A program masquerading as Walk and Text has appeared on several file sharing sites. The real Walk and Text is a messaging program that superimposes its display on a camera view of the real world, with the idea of avoiding embarrassing collisions and other mishaps. The app sells for €1.09 ($A1.49).

The bogus program seems designed to cause rather than avoid embarrassment, as it sends an SMS to everyone in the phone's contact list, reading "Hey,just downlaoded a pirated App off the Internet, Walk and Text for Android. Im stupid and cheap, it costed only 1 buck.Don't steal like I did!"

At the same time, it sends the user's name, phone number and other information to a remote server.

It finally taunts the user with the message: "Application Not Licensed. We really hope you learned something from this. Check your phone bill;) Oh and dont forget to buy the App from the Market".

CONTINUED