F-Secure's Security Cloud is an online service that tracks the security reputation of common programs, files and websites. If a questionable program or file is found during a scan, your F-Secure security product will send a query to the Security Cloud to get its most recent reputation rating. The product will then use that information (and if needed, further analysis) to choose whether to block, quarantine or remove the program or file.
The Security Cloud rating for the program or file indicates that it has code similar to the AndroRAT toolkit.
From the F-Secure Mobile Threat Report Q3 2013:
In July , there were reports of a new toolkit (aka "binders") that simplify the process of inserting malicious code into legitimate Android apps. The binder, named "Androrat APK binder", is used to insert an existing remote access tool (RAT) known as AndroRAT, into a "carrier" app, trojanizing it.
Once the carrier app is installed onto a device, the implanted AndroRAT allows an attacker to remotely control it and among other things, monitor and make calls and messages, activate the camera and microphone, and access stored files.
Date Created: -
Date Last Modified: -