1. Symantec/
  2. Security Response/
  3. Android.Ballonpop


Risk Level 1: Very Low

December 8, 2013
December 10, 2013 11:43:42 AM
Infection Length:
Systems Affected:
Android.Ballonpop is a Trojan horse for Android devices that steals information from the compromised device.

Android package file
The Trojan may arrive as a package with the following characteristics:

Package name: com.ballonpop2.uploadtoserver
Version: 1.1
Name: BalloonPop2

When the Trojan is being installed, it requests permissions to perform the following actions:
  • Open network connections
  • Allow access to accounts listed in the Accounts Service

Once installed, the application will display a green icon with "Balloon Pop 2" written in blue text.

Antivirus Protection Dates

  • Initial Rapid Release version December 8, 2013 revision 024
  • Latest Rapid Release version December 9, 2013 revision 009
  • Initial Daily Certified version December 9, 2013 revision 001
  • Latest Daily Certified version December 9, 2013 revision 025
  • Initial Weekly Certified release date December 11, 2013
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Tommy Dong

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube