Threat Description

Monitoring-Tool:Android/AndSpy.A

Details

Category: Riskware
Type: Monitoring-Tool
Platform: Android

Summary


AndSpy.A is a monitoring and anti-theft program which capabilities can be remotely triggered by sending a particular SMS message to the targeted device.



Removal


Automatic action

F-Secure's Mobile Security product blocks installation of this program with default settings.

More

More information on scanning or removal options are available in the documentation for your F-Secure Mobile Security product on the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for more assistance.



Technical Details


AndSpy.A is a monitoring and anti-theft program that originated from China, but is also marketed to several English speaking regions. Its capabilities can be remotely triggered by sending a particular SMS message to the targeted device. If the message contains a valid command, it will silently perform the corresponding task. For example:

  • 0#: Register the Master number that will be used to send replies
  • 1#: Enable SMS forwarding
  • 2#: Disable SMS forwarding
  • 8#: Send device's contacts
  • 10#: Send location details

AndSpy.A is a stealthy program. It performs malicious activities quietly, and leaves no visible clue that can indicate its presence on the device.



SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Scan & clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free

Learn More