Trojan:Android/FakeBattScar silently forwards information about the device to a remote location.
F-Secure SAFE automatically blocks installation of this program.
More information on scanning and removal options available in your F-Secure product can be found in the Help Center.
You may also refer to the Knowledge Base on the F-Secure Community site for more information.
This trojan masquerades as Android Battery Doctor, an application that claims to help user improve a device's battery performance.
Upon execution, it displays a visual of the device.s battery while secretly connecting to a remote website, from which it tries to advertisements to display on the device; at the same time, it forwards the following information from the device to the same server:
- Device model and manufacturer
- Device location
- Package name
- International Mobile Equipment Identity (IMEI) number
- OS version
- SDK version
- Browser version
- Network operator
This malware is discussed in further detail in: Q4 2011 Mobile Threat Report (PDF).