Android.TechnoReaper Downloader Found on Google Play


By Nathan Collier

We have found a new threat we are calling Android.TechnoReaper. This malware has two parts: a downloader available on the Google Play Market and the spyware app it downloads. The downloaders are disguised as font installing apps, as seen below:

Screenshot1

Once you install the app, it looks like a nice app used to install new fonts on your phone:

Screenshot2

Screenshot3

Everything looks legitimate, but if you look in the code you’ll see you could get more than you bargained for:

Screenshot4

The file ikno.apk is spyware that monitors SMS, call logs, and location. The information about your device and various activities is logged through a web portal. This is all described on their webpage:

Screenshot6

The download link in the upper right corner says “Download iKno from the Android Market”, but it is not actually linked to the Android Market. When clicked, the ikno.apk file simply downloads directly from their site. This app is just another reason to have Webroot SecureAnywhere on your phone, catching malware before it can spy on you.

12 thoughts on “Android.TechnoReaper Downloader Found on Google Play

  1. Pingback: DD Tech Solutions | Android apps found on Google Play download spyware to monitor your text messages, call logs, and location

  2. Pingback: Android apps found on Google Play download spyware to monitor your text messages, call logs, and location - Daily Small Talk

  3. Pingback: Android apps found on Google Play download spyware to monitor your text messages, call logs, and location • The Next Web

  4. Pingback: Android apps found on Google Play download spyware to monitor your text messages, call logs, and location | TechDiem.com

  5. Pingback: Malware on Google Play masquerades as font installing app | TECHNOLOGY

  6. Pingback: Neue Malware im Google Play Store liest eure SMS

  7. Pingback: Android spyware app found monitoring SMS, call logs, and location in Google Play | Technology news

  8. Pingback: Trojan horse apps found disguised as legit Google Play Store apps, security company reveals

  9. Pingback: Fuente Android instalación de aplicaciones de instalación iKno spyware - | Indagadores |Seguridad informatica |Seguridad en internet

  10. Pingback: Android Apps Found on Google Play Download Spyware - The Next Web - The Next Web - Free Spyware Removal Pro

  11. Pingback: Trojan Horse Android Malware Disguised as Legit App found in Google Play Store |

  12. Pingback: كيف خدع الجواسيس متجر جوجل واخترقوا اجهزه Android | لاند درويد

Join the Conversation

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s