1. /
  2. Security Response/
  3. Android.Meswatcherbox

Android.Meswatcherbox

Updated:
November 16, 2011 12:27:36 PM
Type:
Spyware
Name:
SMS Watcher Lite, SMS Watcher Pro
Version:
1.0
Publisher:
mobtree
Risk Impact:
High
Systems Affected:
Android
Android package file
The application arrives as one of the following application packages:

Free version:
APK: com.rjblackbox.swl.apk
Version: 1.0
Publisher: mobtree
Marketplace name: SMS Watcher Lite

Paid version:
APK: com.rjblackbox.swp.apk
Version: 1.0
Publisher: mobtree
Marketplace name: SMS Watcher Pro


Installation
The application must be manually installed.

Once installed, the application will display a icon depicting a red speech bubble and a yellow envelope.



However, the paid version will not display this icon in the main Applications menu, though it will still appear in the Settings > Applications > Manage Applications menu.

An attacker with access to the device must then configure the application to forward text messages to a predetermined phone number.


Permissions
When the application is being installed, it requests permissions to perform the following actions:

  • Send SMS messages.
  • Monitor incoming SMS messages.
  • Read contact data.
  • Access location information, such as GPS, Cell-ID, or WiFi.


System monitoring
The application then forwards all SMS messages on the device to a predetermined phone number.
Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report