Android.Flexispy

Type:

Spyware

Name:

SyncManager

Version:

1.01.021

Publisher:

flexispy.com

Risk Impact:

Low

Behavior

Android.Flexispy is a Spyware application for Android devices that logs the device's activity and sends it to a predetermined website. 

Installation
The Trojan arrives as a package with the following details:
APK: FSLGVAD_1.01.021.apk
Package name: com.vvt.android.syncmanager
Version: 1.01.021
Publisher: flexispy.com


Permissions
When the application is being installed, it requests permissions to perform the following actions:

• Access location information, such as Cell-ID or WiFi.
• Access location information, such as GPS information.
• Access information about networks.
• Open network connections.
• Monitor, modify, or end outgoing calls.
• Read contact data.
• Check the phone's current state.
• Read, write, send, and receive SMS messages on the device.
• Create new contact data.
• Access information about Wi-Fi networks.
• Call into AccountAuthenticators.
• Initiate a phone call.
• Access the list of accounts in the Accounts Service.
• Access information about the currently or recently running tasks.
• Hide the notification that states that the device has restarted.
• Prevent the processor from sleeping or screen from dimming.
• Write to external storage.
• Read and write email in Gmail.
• Modify device state.

Functionality
The application will run in the background, gathering the following information and periodically upload it to flexispy.com:

• Incoming and outgoing call logs
• SMS messages
• Phone book addresses
• Emails
• Browsing history
• Photos