ASCII.jp Android spyware "SMS SPY"

The word "spyware" has a broad sense and a narrow sense.In a broad sense, it refers to "type of software that users with reasonable consideration for security and privacy are informed, and in some cases they want to delete."McAfee calls a spyware in a broad sense of a "suspicious program (PUP)".This time, the Android app "SMS SPY" has been newly added as PUP.

Recently, malware for Android is increasing.Almost every week, we see reports on the latest threats.However, there are few articles that talk about suspicious programs.Suspicious programs (PUP) have been a problem on PCs for a long time, but are they appearing on the latest model smartphones now?When I was analyzing some Android samples, I came across an app.

When installed, the SMS Spy Software is executed as a service in the background, which is invisible to the user.If you send the following SMS to the phone "How are you ???", if the GPS is enabled, use the GPS or use the position searched based on the signal.The telephone position will be sent back by SMS.

As you can see from the following review reviews, some people seem to use this app for the purpose of tracking your boyfriend or her current location.

Unfortunately, SMS SPY has a great flaw, so McAfee adds SMS SPY to the subject to detect.The defect is that the trigger message "How are you ???" cannot be changed.In other words, if anyone sends "How are you ???" and SMS, you will know the current location.

The function to detect this app will be added from the Virus definition file version 6427 as the Potentially Unwanted Program/Spyware-Spyware-Spy-smSspy.

* This article is a recaptured part of the editorial department from the blog operated by Mcafee in the editorial department.