Sophisticated Android Trojan appears in China
01 Jan 2011
A Trojan that can steal data from infected Android smartphones, and which comes bundled with botnet-style functionality, has surfaced in China.
The mobile malware, named Geinimi, which usually poses as gaming applications, has been uploaded onto third-party Chinese Android app markets.
On installation, the malware sends personal data from compromised devices (specifically device identifiers, location information and list of installed applications) to a remote server.
The Trojan can also receive commands from remote servers controlled by hackers. Given its botnet-style functionality coupled with the use of code obfuscation techniques mobile security firm Lookout has described the malware as the most sophisticated to appear on Android devices till date.
Also, since the botnet control functionality still remains unapplied, the precise purpose of the malware is not clear.
Among the few Android infecting malware strains detected till date is a Trojan capable of sending SMS messages to premium-rate numbers from compromised devices. The Trojan appeared on Russian-language sites offering pornographic video clip.