[id-android] WTI : Trojan Alert!!

security firm Lookout warns against 'Geimini' trojan hitting Android in China Posted on Wednesday, Dec 29, 2010 by Phil Nickinson Mobile security firm

Lookout today sounded the alarm on a new Trojan that apparently is affecting Android devices in China. It's called "Geimini" and is piggybacking known legitimate apps, including Monkey Jump 2, Sex Positions, President vs. Aliens, City Defense and Baseball Superstars 2010.

What havoc can it wreak? Says Lookout: The specific information it collects includes location coordinates and unique identifiers for the device (IMEI) and SIM card (IMSI). At five-minute intervals, Geinimi attempts to connect to a remote server using one of ten embedded domain names. A subset of the domain names includes http://www.widifu.com, http:// www.udaore.com, http://www.frijd.com , http://www.islpast.com and http://www.piajesj.com . If it connects, Geinimi transmits collected device information to the remote server.

You're probably going to have to go way, way out of your way for this to be a problem, though. REPEAT: We're not overly worried about this. You have to download and sideload an infected app through Chinese app stores. So unless you're doing that, you should be cool. That said, Lookout notes that Geimini "did substantially increase the level of effort required to analyze the malware" and that it's updated its app to protect against the threat. So if you're running it, you're cool.

source: http://www.androidcentral.com

sent from Jaws_MIUI-1224..it bites!

--
===============
"Indonesian Android Community [id-android]"
 
HTC Android Phone with HTC Sense and HTCsense.com
http://www.htc.com/DesireHD/
---------------------
ID Android Developer
http://groups.google.com/group/id-android-dev
---------------------
Toko Gila Original Surabaya
Email: info@gilaoriginal.com Ph. (031) 91555898
--------------------
i-gadget Store - BEC Bandung
E-mail: ary@i-gadgetstore.com Ph. 0812-21111191
-------------------
Toko EceranShop - BEC Bandung
E-mail: willy@eceranshop.com Ph. 0815-56599888
------------------
 
Aturan Jual/Kloteran ID-Android http://goo.gl/azW7