New Android malware lurking as Obama-Romney polling app

A new malware is now targeting voters in the United States, disguised as a polling service to see if they prefer reelectionist President Barack Obama II and Republican presidential nominee Williard Mitt Romney.

Security vendor Trend Micro said it uncovered at least four such mobile apps on Google Play and some third-party app stores.

"(W)hen installed, (they) gain access to specific device information that can be used without users’ consent and may lead to data leakage," it said.

It added one of these apps was already removed from Google Play but remain available on third-party ones.

Trend Micro said the apps, which can be downloaded for free, are exploiting the upcoming 2012 US presidential election.

It said the first app called “Obama vs Romney” is detected as ANDROIDOS_AIRPUSH, and tries to connect to airpush.com, a mobile ad network site.

"We found that this app has more than 300 downloads from third party stores and an estimated 500 to 1,000 downloads from Google Play so far," it said.

Trend Micro said the app was designed as a polling service in which users can choose between the two candidates.

It is supposed to display an overall result of the poll immediately.

"However, during our testing, it ends up showing the message 'you probably want to start clicking as soon as possible,'” it said.

Also, Trend Micro said this app displays potentially annoying ads served from airpush.com that are displayed outside of the app itself.

Trend Micro said the app also contains ACCESS_COARSE_LOCATION that can access information that includes the device’s GPS location.

A second app is the “Captain America Barack Obama 1.0” detected as a ANDROIDOS_ADWLEADBOLT variant, that installs a Barack Obama 3D wallpaper and US flag on the affected device.

This was already removed from Google Play but is still available on third party app stores.

"Similar to the 'Obama vs. Romney' app, it comes with the ACCESS_COARSE_LOCATION, ACCESS_COARSE_LOCATION and other permissions that gain access to device information like GPS location, CellID, and Wi-fi location," Trend Micro said.

Upon installation, the app also creates a shortcut in the homescreen page of the device.

So far, Trend Micro this app has been downloaded 720 times from third party app stores.

Meanwhile, the third and fourth apps are “Barack Obama Campaign LWP 1” and “Mitt Romney Live Wallpaper 1,” both detected as ANDROIDOS_ADWLEADBOLT variants.

"Both of these apps also contain ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION. Similar to the above mentioned apps, they display ads on the device. Users can prevent this ad display by clicking a specific URL and disclose certain information such as their International Mobile Equipment Identity (IMEI) and device type to the said site," Trend Micro said.

But it said users will likely not notice this and opt to receive the ads.

Trend Micro advised that users read app reviews and developer’s reputation.

It also said users must make it a habit check the access that the apps require, specially if it asks for too much.

"It is not uncommon for cybercriminals to create apps that request access for information, which they can later use for their malicious activities," it said. — TJD, GMA News

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • ToyotaPH continues it’s strong sales in February
    ToyotaPH continues it’s strong sales in February

    Toyota Motor Philippines (TMP) sustains its strong sales in its February performance. Toyota’s strong performance last month was due to the  high demand of the Vios, with sales of 2,012 units and of course the rest of Toyota’s line up such as the Fortuner, Innova, Wigo, Hilux, Avanza and Corolla Altis. Toyota’s luxury brand, Lexus, recorded 60 units last month. …

  • No apology, but Noy seeks understanding
    No apology, but Noy seeks understanding

    There was no apology, but President Aquino yesterday expressed regret, took “full responsibility” and appealed to the nation for “deepest understanding” for the Jan. 25 Mamasapano raid in which dozens died, including 44 police Special Action Force (SAF) commandos. “To every Filipino who has felt failure or has been hurt because of the events related to this operation, it is with abiding humility that I ask for your deepest understanding,” Aquino said in a speech before the 246 new graduates of …

  • MVP on endorsement: Thanks, I’m no politician
    MVP on endorsement: Thanks, I’m no politician

    Businessman Manuel V. Pangilinan is grateful for Sen. Miriam Defensor-Santiago’s praise and presidential endorsement, but says he is not a politician. In an interview on the sidelines of the launch of the search for The Outstanding Young Men (TOYM) of the Philippines 2015 Wednesday night, Pangilinan dismissed the idea of running for president in the 2016 elections. “I’m not a politician, I’m just an ordinary business person,” he added. Santiago endorsed Pangilinan as a presidential candidate …

  • No Lenten break in operations vs lawless groups – AFP
    No Lenten break in operations vs lawless groups – AFP

    The Armed Forces of the Philippines (AFP) is not suspending its offensive against the Abu Sayyaf, New People’s Army (NPA) and other lawless groups during the Holy Week, an official said yesterday. Lt. Col. Harold Cabunoc, AFP public affairs office chief, said the AFP leadership is leaving it up to area and division commanders whether to raise the alert status in preparation for the Holy Week. Those deployed in areas where there are ongoing law enforcement operations against terrorist groups …

  • Probe harassment vs human rights lawyer, CA orders AFP
    Probe harassment vs human rights lawyer, CA orders AFP

    The Court of Appeals (CA) has ordered the Armed Forces of the Philippines (AFP) to investigate a human rights lawyer’s claim of harassment, including surveillance, by several military officers. In a 22-page decision, the former Special Sixth Division of the appellate court granted the petition for writ of amparo and habeas data of Maria Catherine Dannug-Salucon. The CA ordered the AFP to identify the officers behind the surveillance and file charges against them. The CA ruling said …

  • Noy vows to dismantle bata-bata system in PNP
    Noy vows to dismantle bata-bata system in PNP

    President Aquino vowed yesterday to dismantle the culture of factionalism or the bata-bata system within the Philippine National Police as he continued the search for the next PNP chief. Speaking at the Philippine National Police Academy (PNPA) commencement exercises here, the President said the country needed solidarity among leaders and members of the police force so that the policemen would be effective protectors of Filipinos. “Our challenge to the next chief of our national police force: …

  • Envoy to expats: Retire, invest in Phl
    Envoy to expats: Retire, invest in Phl

    Retire and invest in real estate in the Philippines, especially now that the country has made it to the top 10 retirement destinations in the world. This is the message being spread by the Philippine embassy in Washington, with Ambassador Jose Cuisia Jr. leading the refrain in meetings with various Filipino-American communities in the US. In his talks, Cuisia said that an affordable cost of living as well as warm climate and people are just some of the things that make the Philippines a top …

  • PNPA spotlight falls on Ampatuan grandson
    PNPA spotlight falls on Ampatuan grandson

    The stigma of being a namesake of the principal suspect in the 2009 Maguindanao massacre did not prevent Cadet First Class Andal Ampatuan III from entering and graduating from the Philippine National Police Academy (PNPA). Ampatuan III, now with a rank of police inspector, is a grandson of former Maguindanao governor Andal Ampatuan Sr. The younger Ampatuan was among the 246 graduates of the PNPA “Lakandula” Class of 2015. Ampatuan III’s mother is Bai Rebecca Ampatuan, a daughter of the …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options