Threat Description

Monitoring-Tool:​Android/AndSpy.A

Details

Category: Riskware
Type: Monitoring-Tool
Platform: Android

Summary



AndSpy.A is a monitoring and anti-theft program which capabilities can be remotely triggered by sending a particular SMS message to the targeted device.



Removal



F-Secure's Mobile Security product blocks installation of this program with default settings.



Technical Details



AndSpy.A is a monitoring and anti-theft program that originated from China, but is also marketed to several English speaking regions. Its capabilities can be remotely triggered by sending a particular SMS message to the targeted device. If the message contains a valid command, it will silently perform the corresponding task. For example:

  • 0#: Register the Master number that will be used to send replies
  • 1#: Enable SMS forwarding
  • 2#: Disable SMS forwarding
  • 8#: Send device's contacts
  • 10#: Send location details

AndSpy.A is a stealthy program. It performs malicious activities quietly, and leaves no visible clue that can indicate its presence on the device.






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Keep your mobile device protected

F-Secure Mobile Security will keep your mobile device protected on the go and enable you to find it in case you lose it

Learn More