Android app steals sensitive data or maybe not; affected 1 mn phones


A dubious Android wallpaper app allegedly collects your personal data and sends it to a mysterious site in China. Yes, that is  happening and this app has been downloaded millions of times, according to data found by mobile security firm Lookout.
This theft buddy app came from Jackeey Wallpaper, and it was uploaded to the Android Market, where users can download it and use it to beautify their phones, Ironical indeed.
Mobilebeat reports that app collects your browsing history, text messages, your phone’s SIM card number, subscriber identification, and even your voicemail password. It sends the data to a web site, www.imnet.us. That site is evidently owned by someone in Shenzhen, China. The app has been downloaded anywhere from 1.1 million to 4.6 million times. (Mobile just now updated their version to remove browsing history, text messages from stolen data list )

But Phandroid is reporting from the security firm front that the app does collect data from your phone, but only the device’s phone number, subscriber identifier, and voicemail number fields are retrieved. SMS and browsing history are not touched by any of the apps they analyzed throughout their Blackhat conference. Your voicemail’s password is also not transmitted unless you included the password in your phone’s voicemail number field.


Post Author: Gaurav Shukla

Gaurav Shukla is the editor of AndroidOS.in. If you'd like to reach him, drop an email at 'gaurav@androidos.in' or connect with him on Twitter (@gauravshukla).

1 thought on “Android app steals sensitive data or maybe not; affected 1 mn phones

Leave a Reply

Your email address will not be published. Required fields are marked *