TrojanSpy:AndroidOS/Tapsnake.A

Installation

This trojan can be downloaded as a standard .APK installer for mobile devices running on Android. It poses as a game called "Tapsnake" and uses the following icon:

When installing, it displays the following program information, asking if it can access your location:

After it's installed, the trojan looks and acts like the game it is pretending to be:

Payload

Tracks your location

The trojan serves as a client for another mobile application named "GPS Spy" that allows a hacker to check your location every 15 minutes. It also prompts the user to "register" the application by asking for your email address, and then requesting a six-digit key.

Additional information

This application lets you access the Menu option once; after that, the Menu option is disabled. There is also no option to exit the program. You may need to force-close the application using "Manage Applications" or the device's task killer.

Analysis by Marianne Mallen