Love lure malware turns up at Android marketplace
History repeating
Agentless Backup is Not a Myth
Android Trojan writers are trying more tricks to fool the unwary into downloading rogue applications with a new set of rogue applications.
The rogue apps – available via third-party app stores in China – pose as a "love test" application, an ebook reader, and a location tracker. Clued-up users should notice that the dodgy apps request permissions for far more functionality then they would reasonably need, such as the ability to send and receive SMS messages and monitor the state of a smartphone, but the scammers are hoping potential marks don't stop to consider this point.
The malware – detected by Trend Micro as AndroidOS-LUVRTAP-B – automatically executes once an infected smartphone is rebooted. The mobile Trojan uploads the infected users' International Mobile Subscriber Identity to a website under the control of hackers before surreptitiously subscribing victims to premium-rate text-messaging services.
Although these particular malicious apps have been removed from the affected app store, more instances of this kind of fraud can be expected. The incident provides yet more evidence that Android mobile malware developers are following much the same path, and using much the same lures, as their Windows PC predecessors. ®
COMMENTS
It's not rocket science, it's simple...
If a wallpaper application wants your location and permission to send text messages why install?!!!
There is a middle ground here I feel
Yes, most apps will ask to use the internet for ads etc, can't help there. But, for making calls or sending texts or other potentially high cost actions I think the warnings, whilst already there, could be more pronounced.
A popup for example
"This application wants to be able to send SMS messages. The explanation from the developer is below. Only accept if you accept the consequences and potential costs" Then a text box the dev can fill in saying "I need to do this because I want to send MMS of cats to your family" or whatever.
You don't have to know how to build a car to be able to drive one
You do, however, have to know where the brake pedal is.
IT infrastructure monitoring strategies
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
Data control in the cloud
Cloud based data management
Agentless Backup is Not a Myth
