SecurityTube

Fake Antivirus App Steals Contact Data on Mobile Devices

JB

The authors of Android.Enesoluty have added another app to their repertoire. The new app is called “Safe Virus Scan” in Japanese, and as the name suggests, it is supposed to function as an antivirus app. However, as you might have guessed, it does not contain any antivirus functionality and the only action it performs is to steal personal data.

Previous variants displayed messages stating that the app was incompatible with the device. However, unlike its predecessors, this app appears as though it actually functions as advertised.

By the time the scan is complete, the app has uploaded all contact data that is stored on the device to an external site. The app is actually quite convincing and it is difficult to identify anything suspicious about it.

As we have seen in similar cases, the app is downloaded by following a link in a spam email that leads to a third-party hosting site.