Malware in the Android Market: here we go again

Yesterday several new pieces of malware were found in the Android Market by AegisLab. The first big outbreak of malicious software in the Android Market happened more than 2 months ago and there are some things in common between these cases:

• First of all, the March and May outbreaks were likely performed by Chinese hacker(s).
• Secondly, there were several pieces of malware in the official market in both cases.

The malware itself is not very interesting. It will send one SMS message to a Chinese number and after that it writes a marker “Y” in order to prevent further SMS sending.

SMS sending routine

All of the malicious applications were published by the same developer named ‘zsone’. The malware was removed by Google from the Android Market immediately after its malicious nature was discovered. But there is some evidence that some of the applications developed by ‘zsone’ and identified as malicious were uploaded to the Android Market a long time ago.

esed nod32 4 nod32 esed nod32 indir nod32