A new android malware that promises to display videos steals your sensitive data in background. McAfee Researchers spotted this malware in the official Google Play market that targets Japanese users.
When installation, the app request for two permissions -read contact data and read phone state and identity. Once the app installed, it steals sensitive information such as the Android ID, phone number and Contact list.
Once the information is obtained, the malicious application sends it to a remote server in clear text.
"If the data was sent successfully, the application requests a specific video to the same server and displays it using a VideoView component. If the malware fails at its background theft (for example, the device does not have an Internet connection), a message in Japanese says that an error has occurred and the video has not loaded." McAfee said.So far, McAfee discovered 15 malicious applications. The apps had been downloaded by at least 70,00 users. McAfee security products detect it as Android/DougaLeaker.A