Skip to main content

Monitoring-Tool:Android/SpyBubble.A

Classification

Category:

Riskware

Type:

Monitoring-tool

Aliases:

  • SpyBubble
  • SpyBubble.A

Summary

Monitoring-Tool:Android/SpyBubble.A is a commercially available tracking tool.

Removal

Technical Details

Monitoring-Tool:Android/SpyBubble.A monitors incoming and outgoing phone calls and SMS messages, as well as the contact information of other parties.
It can also monitor added photos, visited URLs, and the GPS location of the phone. All this information may be uploaded to a remote server.

Installation

Upon installation, the application waits for the next reboot of the device to activate all of its components.
On reboot, it prompts the user with the terms and conditions, as well requesting the license key for the product, before it actually starts all the monitoring components.
If the installation is successful, the program does not display an icon in the phone's application menu. Users may detect its presence by checking the "Manage applications" menu under Settings for the application name radio.

Activity

Once active, the monitoring components will silently run in the background as services.
The program uses the following permissions to perform these activities:
The application gathers a lot of information from the phone, as well as about the user's activities:
  • Call and SMS tracking:
    • IMEI for GSM and the MEID or ESN for CDMA phones
    • IMSI for a GSM phone
    • MSISDN for a GSM phone or the telephone number of the SIM card
    • Telephone number of the other party
    • Name/Number/Email of the other party if it exists on the phonebook
    • Duration of the call
    • Type of call (incoming, outgoing, or missed)
    • Sent and received message
  • Browsing tracking:
    • Url of the visited websites
  • Location tracking:
    • GPS location of the phone (the method used may incur charges)
  • Pictures:
    • Photos taken and the date it was added
All the gathered information may be sent at interval to a remote server (http://[...].spybubble.com/[...]) using a HTTP post operation without the users knowledge.
The information may also be accessed by the party that installed the app on the phone (if it was not installed by the primary user).
While apps with such behavior may be legitimately used by the device's authorized user, they are classified by security programs as riskware because in the hands of unauthorized users, they can also be used to cause damage to the user's data or the device.
If you are confident that you are aware of the risks involved in using the program and consent to its use, you may choose to keep it installed on your device.

Protect your devices from malware with F‑Secure Total

Protecting your devices from malicious software is essential for maintaining online security. F‑Secure Total makes this easy, helping you to secure your devices in a brilliantly simple way.

  • Award‑winning antivirus and malware protection
  • Online browsing, banking, and shopping protection
  • 24/7 online identity and data breach monitoring
  • Unlimited VPN service to safe­guard your privacy
  • Password manager with private data protection

Choose how many devices you want to protect to get started.

  • Free customer support
  • Cancel anytime
  • The trial does not obligate you to buy the product

After 30 days your subscription will renew automatically for one year at €69.99.

More Support

Community

Ask questions in our Community.

User guides

Check the user guide for instructions.

Contact Support

Chat with with or call an agent.

Submit a Sample

Submit a file or URL for analysis.