There has been a phone app placed on the Android Market that steals your personal information and sends it to a Chinese website. Are we having fun yet?

Here is more info:

Malicious Android Wallpaper App Raided Personal Data

posted Yesterday, 9:17 AM   by Eric M. Zeman

Mobile security firm Lookout has exposed a wallpaper application available in the Android Market that collects personal information and sends it to a web site in China. The application, developed by Jackeey Wallpaper, snags data from users such as their SIM card number, subscriber information, and voicemail password and sent it to http://www.imnet.us, which is registered to a person living in China. According to Lookout, the application (which offered branded wallpapers from the likes of My Little Pony and Star Wars), was downloaded between 1.1 million and 4.6 million times. The application was discovered as part of an analysis of how free Android applications access and use personal data. Android device users are reminded to use caution when downloading apps from the Android Market, and to check what systems and information the application wants to access during the installation process. Google has recently added some anti-piracy measures to the Android Market, but it hasn’t responded directly to this situation.

UPDATE: http://blog.mylookout.com/2010/07/mobile-application-analysis-blackhat/

No evidence of malicious intent, however looking at the data sent from the wallpaper app to the website shows the following items pulled from the phone. So, you call it. Is it malicious to steal this information from your phone and send it to China via a hidden HTTP message?

sim_serial_number=89014103211118510720
subscriber_id=310260000000000
line1_number=15555218135
voice_mail_number=+15552175049

Advertisements