This week, the AVG MobilationT research team found a new instance of malware named ‘Voice Changer’ in the Android market. Fortunately, after our Security research team reported this to Google. They suspended the app for violating the Android Market Developer Distribution Agreement.
The developer’s page in the Android market looks like the following:
The icon of the application looks like:
The Android Manifest file looks like:
When the application opened we can see the following:
It asks the user what number to you want to dial and what voice would you like people to hear (deep scary voice, normal voice and high funny voice).
Also mentioned the service costs 6 NIS per minute in place its hard for the user to spot.
These are the strings.
It is mentioned that the user need to wait 15 seconds for dialing – probably while the call is made to the premium service number and the cost (6 NIS for 1 minute).
Calling a premium service number in Romania:
012 – Israeli mobile operator for getting calls abroad
40 – Country calling code
900720674 – Premium service number
How to remove
AVG MobilationT Anti-Virus Free and Pro products provide protection against this threat.
In order for the protection to be activated, update your Android phone with our latest version.
Keep your device safe with AVG Mobilation Anti-Virus Free and Pro products.
Download now from http://www.avgmobilation.com/products.html
How to avoid getting infected:
When installing new apps to your Android device, always look at the permissions an application requests to approve and make sure the list seems appropriate.
In addition, only download apps from application stores, sites and developers that you trust, and always check the application star rating, developer information and user reviews to make sure you know what you are downloading.
- Fake it till you make it – Mobile Update Week 4 (blogs.avg.com)
- AVG Mobile Threat Update: Week 3 (blogs.avg.com)
After our Security research team reported this to Google. They suspended the app for violating the Android Market Developer Distribution Agreement.
Leave a reply