1. /
  2. Security Response/
  3. Android.Meswatcherbox

Android.Meswatcherbox

Updated:
November 16, 2011 12:27:36 PM
Type:
Spyware
Name:
SMS Watcher Lite, SMS Watcher Pro
Version:
1.0
Publisher:
mobtree
Risk Impact:
High

Behavior

Android.Meswatcherbox is a spyware application for Android devices that forwards SMS messages without the user knowing.

Android package file
The application arrives as one of the following application packages:

Free version:
APK: com.rjblackbox.swl.apk
Version: 1.0
Publisher: mobtree
Marketplace name: SMS Watcher Lite

Paid version:
APK: com.rjblackbox.swp.apk
Version: 1.0
Publisher: mobtree
Marketplace name: SMS Watcher Pro


Installation
The application must be manually installed.

Once installed, the application will display a icon depicting a red speech bubble and a yellow envelope.



However, the paid version will not display this icon in the main Applications menu, though it will still appear in the Settings > Applications > Manage Applications menu.

An attacker with access to the device must then configure the application to forward text messages to a predetermined phone number.

Antivirus Protection Dates

  • Initial Rapid Release version November 15, 2011 revision 006
  • Latest Rapid Release version November 15, 2011 revision 006
  • Initial Daily Certified version November 15, 2011 revision 019
  • Latest Daily Certified version November 15, 2011 revision 019
  • Initial Weekly Certified release date November 16, 2011
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver