Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

TapSnake.A

 
Threat LevelLow threat
DamageHigh
DistributionNot widespread

At a glance

Common name:TapSnake.A
Technical name:Android/TapSnake.A
Threat level:Medium
Type:Trojan
Effects:  

It affects mobile phones with an Android operating system. It seems to be the classic game for phones called the Snake, but besides the game, it installs a spyware program which requires geographical infromation to the GPS of the affected user's phone.

Affected platforms:

First detected on:Aug. 24, 2010
Detection updated on:Aug. 31, 2010
StatisticsNo

Brief Description 

    

TapSnake.A is a Trojan that affects mobile phones with an Android operating system.

Apparently, it is the popular Snake game, but unlike this, TapSnake.A requires geographical information to the GPS of the terminal in order to send the position to a malicious user, as this game is part of the spyware suite called GPS Spy.

It is necessary that a user (the affected or attacking user) installs the program. Therefore physical access to the terminal is required. Additionally, users have to register in order to associate the affected terminal with the GPS Spy software and this way gain access the gathered information.

TapSnake.A can be downloaded from the Android Market.

Visible Symptoms 

    

TapSnake.A is difficult to recognize, as it has the appearance of the Snake game, so it does not make users suspect and realize that it also contains a spyware program.

Tech details

Effects

TapSnake.A is a Trojan that affects mobile phones with an Android operating system.

Once installed in the phone, it carries out the following actions:

  • Apparently, it is the popular Snake game:

    TapSnake application
  • However, it is part of the spyware suite called GPS Spy, and, unlike this, TapSnake.A requires geographical information to the GPS of the terminal in order to send the position to a malicious user.
  • Users have to register in order to associate the affected terminal with the GPS Spy software and this way gain access the gathered information:

    User's registration
  • Although users close the application, it remains memory resident and continues sending information about the location of the affected terminal:

    The application is running though it is closed
  • Though users turn off the phone, the application will be automatically run when the phone is restarted.

Means of transmission 

TapSnake.A is part of a spyware suite and can be downloaded from the Android Market.

Further Details  

TapSnake.A is 28,672 bytes in size.

Solution

See solution