Android trojan records phone calls

The trojan calls itself "Android System Message" and requests the requisite privileges for making recordings

Security experts at CA have discovered a new piece of malware for Google's Android mobile operating system which secretly records phone conversations. If a user installs the app, which, in a crude attempt at camouflage, calls itself "Android System Message", it saves recordings of all outgoing phone conversations in a subdirectory on the SD card.

Although the app does inform the user that it requires privileges which include audio recording, with so many apps requesting privileges which they clearly don't need, most Android users are unlikely to notice this.

According to CA, the configuration file for the app specifies a server where a service belonging to the app could theoretically forward the recordings. The security experts have revealed to Ars Technica, however, that due to a typo this part of the code is currently inactive. The trojan also contains other malicious code – much of which has been seen in earlier malware attacks on the Android platform – though CA does not provide further details of this.

(ehe)