Android.Kidlogger

Type:

Spyware

Version:

1.3 or 1.4

Publisher:

Tesline-Service

Risk Impact:

Low

Behavior

Android.Kidlogger is a Spyware application for Android devices that logs the device's activity and sends it to a predetermined website. 

Installation
The Trojan arrives as a package with the following details:

Free version
APK: KidLoggerLight.apk
Package name: net.kidlogger.kidloggerlight
Version: 1.4
Publisher: Tesline-Service
Application title: KidLogger (Only visible in Settings > Manage Apps.) 
Icon: Default Android Icon

Paid version
APK: KidLogger.apk
Package name: net.kidlogger.kidlogger
Version: 1.4
Publisher: Tesline-Service 
Application title: KidLogger (Only visible in Settings > Manage Apps.) 
Icon: Binoculars 


Keylogger addon
APK: KidLoggerKeyboard.apk
Package name: net.kidlogger.kidloggerkeyboard
Version: 1.3
Publisher: Tesline-Service
Application title: KidLoggerKeyboard (Only visible in Settings > Manage Apps.) 
Icon: Default Android Icon


Permissions
When the application is being installed, it requests permissions to perform the following actions:

• Access location information, such as Cell-ID or WiFi. (Paid version only)
• Access location information, such as GPS information.
• Access and change information about the WiFi state.
• Open network connections.
• Monitor, modify, or end outgoing calls.
• Read contact data.
• Check the phone's current state.
• Read, monitor, and send SMS messages on the device.
• Start once the device has finished booting.
• Read History bookmarks.

Functionality
The application will run in the background, gathering the following information and periodically uploading it to kidlogger.net:

• Incoming and outgoing call logs
• SMS messages
• Phone book addresses
• Emails
• Browsing history
• Photos
• List of running apps
• Keys pressed (with keylogger addon)