1. /
  2. Security Response/
  3. Android.Spytrack

Android.Spytrack

Updated:
August 1, 2012 12:31:37 PM
Type:
Spyware
Name:
Spysat
Version:
2.05
Publisher:
spysat.eu
Risk Impact:
Low
Systems Affected:
Android
Android package file
The Trojan may arrive as a package with one of the following names:

APK:
  • synteo.spysat
  • com.synteo.spysat

Version:
2.05
Name: Synteo SPYSAT.eu


Permissions
When the Trojan is being installed, it requests permissions to perform the following actions:
  • Access location information, such as GPS information
  • Open network connections

Installation
Once installed, the application will display an icon with the following text:
Synteo SPYSAT.eu




System monitoring
When the program is installed, the following information must be configured:
  • Login name
  • Password

Next, the program gathers the following information from the device:
  • GPS location
  • Spysat login information

The program then periodically uploads the above information to the following remote location:
[http://]spysat.pl/dh/[REMOVED]
Writeup By: Daniel Xiang
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver