TrendMicro researchers have come across a spytool which is currently available on Google Play, that is actively being discussed on certain hacker forums.
This tool’s beta version is available on the site since March 11. An estimated 500 – 1000 users have already downloaded the said spytool, which Trend Micro detects as ANDROIDOS_SMSSPY.DT.
This spytool gathers SMS messages from an infected mobile device and sends these to a remote FTP server at regular times set during the app’s installation.
As the app is still in its beta testing, spying on a mobile device using this tool poses certain challenges. First, it should be installed onto the target device without the victim knowing about it.
Second, potential attackers would need to setup their own FTP servers, which may be difficult for those with less advanced IT knowledge.
