Android mobile malware has botnet-like traits

30.12.2010
Hackers are aiming for users of Google's Android mobile operating system with a malicious application that harvests personal information and sends it to a remote server.

The malware, which has been named "Geinimi," appears to be the first one that has botnet-like capabilities targeted at the Android platform, said Kevin Mahaffey, chief technology officer for Lookout Mobile Security, which develops mobile security software.

Geinimi appears to target Chinese-speaking users of Android, and Lookout was tipped off to Geinimi after a user wrote a post concerned about it on a forum, Mahaffey said.

Lookout researchers, which posted a on Geinimi, have found that it has been wrapped into legitimate free and paid games for Android users with those games' developers unaware their applications are being used as a lure.

"We have been in touch with developers to let them know," Mahaffey said.

Those tampered applications are appearing on third-party web sites offering Android applications that have not been vetted for security. Some of those programs have appeared to be downloaded thousands of times.