A new Trojan built into Android applications could infect up to 5 million users. This is one of the largest companies producing malware, warns Symantec.

Software development company Symantec has discovered malware distributed along with Android applications. This program, which Symantec has given the name Android.Counterclank, can come to the smartphone along with 13 different applications available on the Android Market, such as Sexy Girls Puzzle and Counter Strike Ground Force. Symantec estimates that the malware could have infected between 1 million and 5 million users.

As Symantec suggests, the authors of this software install Android.Counterclank as a Trojan on regular Android applications, and then re-upload the same applications, but with modified code, to the Android Market. Android.Counterclank collects information about the mobile device, including a complete copy of all bookmarks in the browser, SIM card serial number and manufacturing information about the smartphone. It also changes the browser's home page and displays advertisements.

Symantec spokesman Kevin Haley notes that users themselves give this malware the right to access their information. “If you are a distrustful person, you would wonder why you are asked for permission to change browser settings or transmit GPS coordinates. But most people don't think about it" and give permission without reading the warnings on the screen, says Kevin Haley.

Android.Counterclank is a variant of the Android.Tonclank Trojan that was discovered in June last year. A detailed description of Android.Counterclank and recommendations on how to avoid this malware can be found on the Symantec website.

Note that some research companies, such as Lookout Mobile Security, believe that Android.Counterclank is not malware, but only an “aggressive method of distributing advertising.”

Seda Yeghikyan

A new Trojan on the Android Market could infect 5 million users