Android package file
The application arrives as the following application package:APK:
The application must be manually installed.
The application will create an entry with an icon containing the text "SMS SPY" in the Settings > Applications menu.
However, the icon will not appear in the standard Applications menu.
The application also creates a service with the following name:
When the application is being installed, it requests permissions to perform the following actions:
- Monitor incoming SMS messages.
- Send SMS messages.
- Access location information, such as GPS information.
- Read SMS messages on the device.
- Create new SMS messages.
- Check the phone's current state.
- Read contact data.
The application monitors incoming SMS messages. If it receives a message with the following text, it will send back the device's GPS coordinates and a link to Google Maps:
How are you???Other information
These SMS messages will be visible to the user, unless the attacker previously created a contact on the device with the following name:
If this contact exists, the SMS messages will be deleted before they are displayed.