Android.Meswatcherbox

Type:

Spyware

Name:

SMS Watcher Lite, SMS Watcher Pro

Version:

1.0

Publisher:

mobtree

Risk Impact:

High

Behavior

Android.Meswatcherbox is a spyware application for Android devices that forwards SMS messages without the user knowing. 

Android package file
The application arrives as one of the following application packages:

Free version:
APK: com.rjblackbox.swl.apk
Version: 1.0 
Publisher: mobtree
Marketplace name: SMS Watcher Lite

Paid version:
APK: com.rjblackbox.swp.apk 
Version: 1.0
Publisher: mobtree
Marketplace name: SMS Watcher Pro 


InstallationThe application must be manually installed.

Once installed, the application will display a icon depicting a red speech bubble and a yellow envelope.



However, the paid version will not display this icon in the main Applications menu, though it will still appear in the Settings > Applications > Manage Applications menu.

An attacker with access to the device must then configure the application to forward text messages to a predetermined phone number.

Android package file
The application arrives as one of the following application packages:

Free version:
APK: com.rjblackbox.swl.apk
Version: 1.0 
Publisher: mobtree
Marketplace name: SMS Watcher Lite

Paid version:
APK: com.rjblackbox.swp.apk 
Version: 1.0
Publisher: mobtree
Marketplace name: SMS Watcher Pro 


InstallationThe application must be manually installed.

Once installed, the application will display a icon depicting a red speech bubble and a yellow envelope.



However, the paid version will not display this icon in the main Applications menu, though it will still appear in the Settings > Applications > Manage Applications menu.

An attacker with access to the device must then configure the application to forward text messages to a predetermined phone number.


Permissions
When the application is being installed, it requests permissions to perform the following actions:

• Send SMS messages.
• Monitor incoming SMS messages.
• Read contact data.
• Access location information, such as GPS, Cell-ID, or WiFi.

System monitoring
The application then forwards all SMS messages on the device to a predetermined phone number.