Android.Lifemonspy

Type:

Spyware

Name:

LIFEMONITOR: SPY

Version:

1.2

Publisher:

Studio Prosto

Risk Impact:

High

Behavior

Android.Lifemonspy is a spyware application for Android devices that can track the phone's location, download SMS messages, and erase certain data from the device. 

Android package file
The Trojan arrives as one of the following application package:

APK: spy.lifemonitor.com.apk 
Version: 1.2
Publisher: Studio Prosto
Name: LIFEMONITOR: SPY 


InstallationThe program must be manually installed.

The application will create an entry with an icon depicting a smartphone in the Settings > Applications > Manage Applications menu:


Android package file
The application arrives as the following application package:

APK: spy.lifemonitor.com.apk 
Version: 1.2
Publisher: Studio Prosto
Name: LIFEMONITOR: SPY 


InstallationThe application must be manually installed.

The application will create an entry with an icon depicting a smartphone in the Settings > Applications > Manage Applications menu:



However, the icon will not appear in the standard Applications menu.


Permissions
When the application is being installed, it requests permissions to perform the following actions:

• Access location information, such as GPS information.
• Access location information, such as Cell-ID or WiFi.
• Access information about the WiFi state.
• Create mock location providers.
• Access information about networks.
• Allow access to low-level power management.
• Open network connections.
• Monitor, modify, or end outgoing calls.
• Check the phone's current state.
• Read SMS messages on the device.
• Read contact data.
• Check the phone's current state.
• Reboot the device.
• Monitor incoming SMS messages.
• Send SMS messages.
• Prevent processor from sleeping or screen from dimming.
• Write to external storage devices.
• Create new contact data.

System monitoring
The attacker can then connect to the device remotely and gather information from the device. The application can send back the location of the device, as well as retrieve SMS messages. 
However, this icon will not appear in the standard Applications menu.