The Latest in IT Security

Not long ago, organizers of this year’s Olympic Games released London 2012 – Official Mobile Game, a fun smartphone app for Android, iOS, and Blackberry users.

Screenshots taken from Google Play
(click to enlarge)

According to this website: “The Official London 2012 mobile game features nine Olympic games, including Archery, Double Trap Shooting, 110m Hurdles and Swimming, in authentic London 2012 venues. Easy to play but difficult to master!”

With this app, the average joe and jane can take part in “the greatest show on earth” any time and anywhere, be it at a stop while waiting for a bus or in a coffee shop, lounging. Winning gold medals (albeit in bite-sizes) has never been this convenient.

Losing a game, however, is the least of any mobile gaming enthusiast’s problems. It’s the scammers.

One of our researchers in the AV Labs spotted a couple of Russian websites, which claim to be legitimate app markets, housing malicious files purporting to be the official London 2012 mobile game.

click to enlarge

The screenshot of the fake app market on the left appears to mimic the look and feel of the legitimate Google Play website. The one on the right markets its fake app specifically to Samsung phone users.

Below are specific details regarding these websites:

• Website 1: igry-for-android(dot)ru
  • Package name: com.soft.android.appinstaller
  • APK file: igra_Android_London2012_Official-installator.apk

• Website 2: samsungs5570(dot)ru
  • Package name: com.software.application
  • APK file: london2012_official_game_v1_4_install.apk

Take note that package and/or APK file names may change in the future.

We have also spotted more fake app markets that link back to these malicious files. GFI VIPRE Mobile Security detects them as Trojan.AndroidOS.Generic.A. They exhibit behaviors typically found in the Boxer malware family. In addition, both files made no attempts to download the legitimate game app.

If you, dear Reader, are interested in downloading the legitimate game, or perhaps other apps from the Olympics organization, visit these official download sites and nowhere else:

• Official London 2012 Mobile Apps
• London 2012 Mobile Game on Google Play
• London 2012 for iOS on iTunes
• Official Video Game Page of the Olympics

Jovi Umawing (Thanks to Randall for spotting this)