Android.Spybubble

Type:

Spyware

Version:

1.0

Publisher:

spybubble.com

Risk Impact:

Low

Behavior

Android.Spybubble is a Spyware application for Android devices that logs the device's activity and sends it to a predetermined website. 

Installation
The Trojan arrives as a package with the following details:
APK: bubb.apk or radio.apk
Package name: com.spybubble or com.radio
Version: 1.0
Publisher: spybubble.com


Permissions
When the application is being installed, it requests permissions to perform the following actions:

• Access location information, such as Cell-ID or WiFi.
• Access location information, such as GPS information.
• Access information about networks.
• Read the browsing history.
• Open network connections.
• Monitor, modify, or end outgoing calls.
• Read contact data.
• Check the phone's current state.
• Read, write, send, and receive SMS messages on the device.
• Create new contact data.
• Read or write to the system settings.

Functionality
The application will run in the background, gathering the following information and periodically uploading it to spybubble.com:

• Incoming and outgoing call logs
• SMS messages
• Phone book addresses
• Emails
• Browsing history
• Photos