Android app steals sensitive data or maybe not; affected 1 mn phones
A dubious Android wallpaper app allegedly collects your personal data and sends it to a mysterious site in China. Yes, that is happening and this app has been downloaded over a million times, according to the data found by mobile security firm Lookout.
This theft buddy app came from Jackeey Wallpaper, and it was uploaded to the Android Market, where users can download it and use it to beautify their phones.
Mobilebeat reports that app collects your browsing history, text messages, your phone’s SIM card number, subscriber identification, and even your voicemail password. It sends the data to a web site, http://www.imnet.us. That site is evidently owned by someone in Shenzhen, China. The app has been downloaded anywhere from 1.1 million to 4.6 million times. (Mobile just now updated their version to remove browsing history, text messages from stolen data list )
But Phandroid is reporting from the security firm front that the app does collect data from your phone, but only the device’s phone number, subscriber identifier, and voicemail number fields are retrieved. SMS and browsing history are not touched by any of the apps they analyzed throughout their Blackhat conference. Your voicemail’s password is also not transmitted unless you included the password in your phone’s voicemail number field.