Android Malware "DDSpy" Pretends to be Gmail, Steals Phone Logs
June 7, 2012 10:59 PM
comment(s) - last by
Users will not see an icon for DDSpy -- it simply hides in the Android-powered device's application list and runs silently
New malicious software has been detected on Android devices where a user's personal information is stolen by a fake Gmail program.
, called DDSpy, acts like a Gmail service in Android gadgets. However, users will not see an icon for DDSpy -- it works by hiding in the app list and waiting for commands from a remote server via SMS. These commands include "BOOT_COMPLETED," "SMS_RECEIVED," and "PHONE_STATE."
Once DDSpy is given these commands, the
malware can begin uploading the Android user's
SMS records, call log and vocal records. DDSpy is capable of configuring the uploading email address on the device and figuring out what content to steal. It also records calls when it detects outbound calls and when it's configured by SMS. From there, the recorded files are stored in SDCard/DCIM/.thumbnails/directory.
DDSpy has a default uploading mode coded into it where it sends its collected information to an email address at a certain time each day.
NQ Mobile's Security Research Center, which discovered DDSpy as a threat, is particularly worried about this malware because it uses a GPS-uploading interface "for future development," meaning it could turn into a more malicious version at some point.
NQ Mobile Security offered a few tips as to how to avoid getting DDSpy, such as only downloading apps from trusted sources, never accepting apps from unknown sources and keeping an eye on odd behavior.
NQ Mobile Security
This article is over a month old, voting and posting comments is disabled
RE: ...and how do you get it?
6/11/2012 12:07:58 AM
Apparently you side load it. The source article mentioned nothing of it being on the play store.
“We do believe we have a moral responsibility to keep porn off the iPhone.” -- Steve Jobs
Apple is Giving Android a Beatdown in Malware Prevention
August 24, 2011, 1:20 PM
Over 260,000 Android Users Infected, Google Fights Back
March 7, 2011, 10:08 AM
Samsung Announces Galaxy S5 Plus with Snapdragon 805 Processor, LTE-A
October 22, 2014, 3:40 PM
Motorola Further Increases Moto 360 Battery Life with New Update
October 22, 2014, 8:08 AM
Apple's iPad Air 2 Features Triple-core A8X Processor, 2GB of RAM
October 21, 2014, 8:32 PM
Toshiba Launches 11”, 2-in-1 Convertible PC for $329
October 21, 2014, 2:11 PM
Microsoft Begins Shifting Nokia Lumia Branding to "Microsoft Lumia"
October 21, 2014, 10:52 AM
Tim Cook Touts Apple’s Product Portfolio, Performance in Letter to Employees
October 21, 2014, 8:05 AM
Most Popular Articles
Cool Science Video of the Day: Carnivorous Leech Eats Giant Jungle Worm
October 16, 2014, 6:44 PM
Chinese Government Declares Digital War Against America's Top Tech Firms
October 20, 2014, 12:07 PM
PS4 "Masamune" Update 2.0 Will Bring New Music and Customization Features
October 17, 2014, 1:05 PM
HBO, CBS Lead Charge to Ditch Cable
October 16, 2014, 4:40 PM
Update: Motorola Droid Turbo Coming Oct 28, 48-hour Battery Life Confirmed
October 19, 2014, 9:19 PM
Latest Blog Posts
The Surface Mini That Was Never Released Gets "Hands On" Treatment
Sep 26, 2014, 8:22 AM
ISIS Imposes Ban on Teaching Evolution in Iraq
Sep 17, 2014, 5:22 PM
Space Terrorism is a Looming Threat For the United States
Apr 23, 2014, 7:47 PM
Facebook Aims to Provide Internet to "Every Person in the World" with Drones, Satellites
Apr 1, 2014, 10:20 AM
Retail Mobile Sites Experience Outages in Light of Simplexity's Bankruptcy
Mar 14, 2014, 8:48 AM
More Blog Posts
Copyright 2014 DailyTech LLC. -
Terms, Conditions & Privacy Information