- Type:
- Trojan
Android.Antammi is a Trojan horse that steals information from Android devices.
Permissions
When the Trojan is being installed, it requests permissions:
- Open network connections.
- Write to external storage devices.
- Send SMS messages.
- Allows mounting and unmounting file systems for removable storage.
- Check the phone's current state.
- Access information about networks.
- Read and write information about the owner of the device.
- Broadcast a notification that an application package has been removed.
- Allows packages to be installed.
- Start once the device has finished booting.
Functionality The Trojan steals all the information from the device, including contacts, SMS, GPS data, and images, and uploads it to the following location:
[http://]apps2.mmi.ru/uniapp/get[REMOVED]
It creates following files to store stolen data:
- /sdcard/uniAppLog.txt
- /sdcard/uniApp/contacts.txt
- /sdcard/uniApp/messages.txt
When the Trojan is being installed, it requests permissions:
- Open network connections.
- Write to external storage devices.
- Send SMS messages.
- Allows mounting and unmounting file systems for removable storage.
- Check the phone's current state.
- Access information about networks.
- Read and write information about the owner of the device.
- Broadcast a notification that an application package has been removed.
- Allows packages to be installed.
- Start once the device has finished booting.
Functionality The Trojan steals all the information from the device, including contacts, SMS, GPS data, and images, and uploads it to the following location:
[http://]apps2.mmi.ru/uniapp/get[REMOVED]
It creates following files to store stolen data:
- /sdcard/uniAppLog.txt
- /sdcard/uniApp/contacts.txt
- /sdcard/uniApp/messages.txt
Žádné komentáře:
Okomentovat