Researcher warns of Android phone ‘botnet’
Agence France-Presse

A model displays Japan's second largest mobile carrier KDDI's new Android OS based smart phone "IS-03", produced by Japanese electronics giant Sharp in Tokyo on October 4, 2010. In a blog post on Tuesday, July 3, 2012, Microsoft security engineer Terry Zink said malware has been spreading on Android mobile phones and infected phones of users' Yahoo e-mail accounts to send out spam messages. AFP PHOTO/YOSHIKAZU TSUNO
WASHINGTON—Malware has been spreading on Android mobile phones that takes control of certain e-mail accounts to create a “botnet” to send out spam, a security researcher said this week.
Microsoft security engineer Terry Zink said the malware has infected phones of users’ Yahoo e-mail accounts to send out spam messages.
“We’ve all heard the rumors, but this is the first time I have seen it – a spammer has control of a botnet that lives on Android devices,” Zink said in a blog post Tuesday.
“These devices login to the user’s Yahoo Mail account and send spam.”
He said the phones appear to be located in Chile, Indonesia, Lebanon, Oman, Philippines, Russia, Saudi Arabia, Thailand, Ukraine and Venezuela.
“I’ve written in the past that Android has the most malware compared to other smartphone platforms, but your odds of downloading and installing a malicious Android app is pretty low if you get it from the Android Marketplace,” he said.
“But if you get it from some guy in a back alley on the Internet, the odds go way up.”
He added that users in the developed world “usually have better security practices and fewer malware infections than users in the developing world.”
“I am betting that the users of those phones downloaded some malicious Android app in order to avoid paying for a legitimate version and they got more than they bargained for,” Zink said.
“Either that or they acquired a rogue Yahoo Mail app.”
A report earlier this year by the security firm AV-Test found some Android downloaded malicious code after installation and said this is more common in the Google Android system than in the Apple ecosystem which has stricter security policies.
Google has a security system known as Bouncer to scan for malware but some experts recommend additional protection for phones using the platform.
Other Stories:
Recent Stories:
Waterspout damages 38 houses in Polomolok 51 mins elapsed
Healthy gorilla born to 1st time parents at US zoo 55 mins elapsed
US teen takes Danish supermodel to prom 1 hour elapsed
Indy 500 could be better than 2012′s epic race 2 hours elapsed
US kidnap case hero not endorsing free burgers 2 hours elapsed
Pacers steal Game 2 from Heat, 97-93 2 hours elapsed
Elite NYC school apologizes for past abuse 3 hours elapsed