Mobile Trojan Targets Android Devices

Wednesday, October 15, 2014 @ 05:10 PM gHale

A new mobile Trojan targeting Android devices disguises itself as a tic-tac-toe game.

Detected as Trojan-Spy,AndroidOS.Gomal.a, or Gomal, it is capable of recording audio from the microphone, stealing incoming SMS messages, stealing device information such as cell phone number, obtaining root privileges, dumping memory regions of some processes in order to obtain sensitive data, and stealing data from the device log, said Victor Chebyshev, a Kaspersky Lab researcher.

SMS Trojans Top Android Threats
Beware of Destructive Android Trojan
Faux Termination Emails a Farce
Oil & Gas Firm Attacked

Upon obtaining root access, the Trojan can go out and steal emails, according to a Securelist blog post. The tic-tac-toe game code accounts for less than 30 percent of the file’s size, with the remainder used for data theft and spying.

Packaging Trojans in mobile games is common – there are multiple cases of attackers following through on that method.

Gomal uses quite a few techniques initially incorporated into Windows Trojans, the post said.

β€œAnd, most dangerously, the principles upon which this technique is based can be used to steal data from applications other than Good for Enterprise – it is likely that a range of mobile malware designed to attack popular email clients, messengers and other programs will appear in the near future.”

Leave a Reply

You must be logged in to post a comment.