SecurityTube

Exprespam Android Malware Steals Upwards to 75,000 Bits of Information

JB

Early research from Symantec estimates that spammers behind a new type of Android malware may have already stolen “between 75,000 and 450,000 pieces of personal information” from Japanese users. While these numbers may be disparate it does suggest the malware, Android.Exprespam, has been successful since popping up a few weeks ago.

According to a blog post this morning by one of the firm's security researchers Joji Hamada, one website serving up the malware saw more than 3,000 visits last week while another similar looking, yet unnamed app store appears to be on standby.

As previously reported, the websites trick users into downloading apps by mimicking the Google Play market. One site even called itself “Gcogle Play” earlier this month before changing its name to “Android Express’s Play,” according to an older blog entry on the malware. Links to the faux markets have been circulating in spammy Android newsletter emails since the beginning of the month.