Threat Description

Adware: Android/Ropin.A

Details

Category: Spyware
Type: Adware
Platform: Android

Summary


Ropin.A is an application that gathers data from an infected device, and later forwards the data to a remote server.



Removal


Automatic action

F-Secure's Mobile Security product blocks installation of this program with default settings.

More

More information on scanning or removal options are available in the documentation for your F-Secure Mobile Security product on the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for more assistance.



Technical Details


Ropin.A is an application that comes bundled with LeadBolt advertisement modules. While advertisement modules or SDKs are not necessarily harmful, this particular module leaks out personaland confidential data from the device to a remote site without the user's knowledge.

Ropin.A collects and forwards the following data to a remote server:

  • Carrier's numeric code
  • Carrier's name
  • Date and time
  • Device manufacturer
  • Device model
  • Device version
  • International Mobile Equipment Identity (IMEI) number, or Device ID
  • Local IP address
  • Location (Latitude and Longitude)
  • Mobile Country Code
  • Network and SIM state
  • Phone number

NOTE:

This detection does not guarantee the maliciousness or cleanliness of the application module, but detects the presence of LeadBolt advertisements.





Description Created: 2012-08-13 00:00:00.0

Description Last Modified: 2012-08-13 00:00:00.0


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Keep your mobile device protected

F-Secure Mobile Security will keep your mobile device protected on the go and enable you to find it in case you lose it

Learn More