Monitoring-Tool:Android/AndSpy.A

Threat description

Details

Category: Riskware
Type: Monitoring-Tool
Platform: Android

Summary


AndSpy.A is a monitoring and anti-theft program which capabilities can be remotely triggered by sending a particular SMS message to the targeted device.



Removal


Automatic action

Once detected, the F-Secure security product will automatically block the program and prompt the user for a desired action.

More

More information on scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more assistance.



Technical Details


AndSpy.A is a monitoring and anti-theft program that originated from China, but is also marketed to several English speaking regions. Its capabilities can be remotely triggered by sending a particular SMS message to the targeted device. If the message contains a valid command, it will silently perform the corresponding task. For example:

  • 0#: Register the Master number that will be used to send replies
  • 1#: Enable SMS forwarding
  • 2#: Disable SMS forwarding
  • 8#: Send device's contacts
  • 10#: Send location details

AndSpy.A is a stealthy program. It performs malicious activities quietly, and leaves no visible clue that can indicate its presence on the device.





Description Created: 2012-08-15 00:00:00.0

Description Last Modified: 2012-08-15 00:00:00.0


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Protect your life on every device

F-Secure SAFE looks out for you and the people close to you, on every device, all the time.

Learn More