New Android malware lurking as Obama-Romney polling app

A new malware is now targeting voters in the United States, disguised as a polling service to see if they prefer reelectionist President Barack Obama II and Republican presidential nominee Williard Mitt Romney.

Security vendor Trend Micro said it uncovered at least four such mobile apps on Google Play and some third-party app stores.

"(W)hen installed, (they) gain access to specific device information that can be used without users’ consent and may lead to data leakage," it said.

It added one of these apps was already removed from Google Play but remain available on third-party ones.

Trend Micro said the apps, which can be downloaded for free, are exploiting the upcoming 2012 US presidential election.

It said the first app called “Obama vs Romney” is detected as ANDROIDOS_AIRPUSH, and tries to connect to airpush.com, a mobile ad network site.

"We found that this app has more than 300 downloads from third party stores and an estimated 500 to 1,000 downloads from Google Play so far," it said.

Trend Micro said the app was designed as a polling service in which users can choose between the two candidates.

It is supposed to display an overall result of the poll immediately.

"However, during our testing, it ends up showing the message 'you probably want to start clicking as soon as possible,'” it said.

Also, Trend Micro said this app displays potentially annoying ads served from airpush.com that are displayed outside of the app itself.

Trend Micro said the app also contains ACCESS_COARSE_LOCATION that can access information that includes the device’s GPS location.

A second app is the “Captain America Barack Obama 1.0” detected as a ANDROIDOS_ADWLEADBOLT variant, that installs a Barack Obama 3D wallpaper and US flag on the affected device.

This was already removed from Google Play but is still available on third party app stores.

"Similar to the 'Obama vs. Romney' app, it comes with the ACCESS_COARSE_LOCATION, ACCESS_COARSE_LOCATION and other permissions that gain access to device information like GPS location, CellID, and Wi-fi location," Trend Micro said.

Upon installation, the app also creates a shortcut in the homescreen page of the device.

So far, Trend Micro this app has been downloaded 720 times from third party app stores.

Meanwhile, the third and fourth apps are “Barack Obama Campaign LWP 1” and “Mitt Romney Live Wallpaper 1,” both detected as ANDROIDOS_ADWLEADBOLT variants.

"Both of these apps also contain ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION. Similar to the above mentioned apps, they display ads on the device. Users can prevent this ad display by clicking a specific URL and disclose certain information such as their International Mobile Equipment Identity (IMEI) and device type to the said site," Trend Micro said.

But it said users will likely not notice this and opt to receive the ads.

Trend Micro advised that users read app reviews and developer’s reputation.

It also said users must make it a habit check the access that the apps require, specially if it asks for too much.

"It is not uncommon for cybercriminals to create apps that request access for information, which they can later use for their malicious activities," it said. — TJD, GMA News

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • Lupita Nyong'o's $150,000 Oscars dress stolen from hotel
    Lupita Nyong'o's $150,000 Oscars dress stolen from hotel

    The $150,000 pearl-studded, custom-made Calvin Klein dress worn by Oscar-winning actress Lupita Nyong'o at this year's Academy Awards has been stolen, police said on Thursday. The gown, embellished with 6,000 natural white pearls, was stolen from Nyong'o's room at the London Hotel in West Hollywood, during the day on Wednesday, a spokesman for the Los Angeles County Sheriff's Department in West Hollywood said. "Ms Nyong'o was not in the room at the time of the theft," Deputy John Mitchell …

  • South Korea decriminalises adultery, condom shares soar
    South Korea decriminalises adultery, condom shares soar

    South Korea's Constitutional Court on Thursday struck down a controversial adultery law which for more than 60 years had criminalised extra-marital sex and jailed violators for up to two years. The decision saw shares in the South Korean firm Unidus Corp., one of the world's largest condom manufacturers, soar by the daily limit of 15 percent on the local stock exchange. "Even if adultery should be condemned as immoral, state power should not intervene in individuals' private lives," said …

  • US-led strikes on IS after group seizes 220 Christians
    US-led strikes on IS after group seizes 220 Christians

    The US-led coalition has carried out air strikes against the Islamic State group in northeastern Syria, where the jihadists have launched a new offensive and kidnapped 220 Assyrian Christians. The raids on Thursday struck areas around the town of Tal Tamr in Hasakeh province, the Syrian Observatory for Human Rights said, without giving information on possible casualties. The town remains under the control of Kurdish forces, but at least 10 surrounding villages have been seized by IS, along …

  • U.S. flies most advanced surveillance plane from Philippines

    By Manuel Mogato MANILA (Reuters) - The United States has begun flying its most advanced surveillance aircraft, the P-8A Poseidon, out of the Philippines for patrols over the South China Sea, the U.S. Navy said on Thursday, acknowledging the flights for the first time. The United States, the Philippines' oldest and closest ally, has promised to share "real time" information on what is happening in Philippine waters as China steps up its activities in the South China Sea. China claims most of …

  • Militants abduct more Christians, smash ancient artifacts
    Militants abduct more Christians, smash ancient artifacts

    BEIRUT (AP) — Islamic State militants seized more Christians from their homes in northeastern Syria in the past three days, bringing the total number abducted by the extremist group to over 220, activists said Thursday. …

  • IS executioner 'Jihadi John' named as London graduate
    IS executioner 'Jihadi John' named as London graduate

    "Jihadi John", the masked Islamic State group militant believed responsible for beheading of at least five Western hostages, has been named as Kuwaiti-born computing graduate Mohammed Emwazi from London. "Jihadi John", nicknamed after Beatle John Lennon due to his British accent, is believed to be responsible for the murders of US journalists James Foley and Steven Sotloff, British aid workers David Haines and Alan Henning and American aid worker Abdul-Rahman Kassig. …

  • Purisima denies endorsing successor
    Purisima denies endorsing successor

    Resigned Philippine National Police (PNP) chief Director General Alan Purisima denied reports that he has been urging President Aquino to appoint his protegé as the new police chief. “Contrary to news reports, PDG Alan La Madrid Purisima is not in any position to recommend and has not in fact recommended anyone to the President for appointment as next chief of the PNP,” his lawyer Kristoffer James Purisima said yesterday. Sources said that Purisima may have resigned but he reportedly remains …

  • National Geographic 'Afghan girl' in Pakistan papers probe
    National Geographic 'Afghan girl' in Pakistan papers probe

    Pakistani officials are investigating after the famous green-eyed "Afghan girl" immortalised in a 1985 National Geographic magazine cover was found living in the country on fraudulent identity papers. The haunting image of the then 12-year-old Sharbat Gula, taken in a refugee camp by photographer Steve McCurry, became the most famous cover image in the magazine's history. Now Pakistani officials say that Gula applied for a Pakistani identity card in the northwestern city of Peshawar in April …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options