This Trojan must be manually installed.
When it is executed, it registers itself as a service.
The Trojan then gathers the following information from the device:
- Calendar events
- Cell ID locations
- GPS information
- Internet history
It then sends the above information to the following remote server:
A web page can then be used to access the above server and monitor the device in real-time.
Symantec Security Response encourages all users and administrators to adhere to the following basic security "best practices":