Android Application on Solar Charging Steals Information
Android Application on Solar Charging Steals Information
Most smartphone users know that battery life is a
perennial problem. The high processing power of embedded
CPUs and large, bright LCD screens, coupled with frequent
usage, means a lot of juice is required to keep the show
going throughout the day. This has spawned a whole genre of
applications aimed at addressing this problem. There are
some applications that will offer status updates on battery
life and notify users when the battery is getting low, but
breaking through the boundaries of credibility are a bunch
of applications that will supposedly turn the phone screen
into a solar charger.
Malware developers too have caught on and are taking advantage of smartphone users’ constant need for power by creating malicious apps to steal confidential information. In the September 2012 edition of the Symantec Intelligence Report, an Android application we’ve detected – Android.Sumzand – claims to convert the smartphone screen into a solar panel that can charge the battery. Android devices do not contain solar panels – a critical component needed to turn light into electricity. Naturally the application can do nothing of the sort. Instead, what the app really does is steal contact data from the phone.
Until real solar panels are actually
installed on phones, Symantec advises users to just continue
charging their phone the old-fashioned way: plugging it in
to a wall socket or USB port. Besides that, be careful what
you download and install from application marketplaces. If
an application requests permissions that seem out of the
ordinary for what it is supposed to do, then don’t install
it.
In addition, as more SMBs adopt mobility in the workplace to encourage productivity, the growth of these mobile connections becomes a mounting challenge to secure, owing to the increasingly sophisticated and tricky threat landscape. Symantec advises users to be careful when downloading or installing apps from application marketplaces.