Malicious App Find and Call Removed from App Stores

MOSCOW, Russia – MegaFon, one of the three biggest mobile phone operators in Russia, reported a suspicious app found in both Apple Store and Google Play, now confirmed by Kaspersky.

The app, Find and Call, was initially just thought to be spreading an SMS worm to every contact stored in the phonebook. However, a detailed diagnosis found out that the app is actually a Trojan. It secretly steals phonebook and contact numbers from iOS or Android devices and uploads them to a remote server.

These stolen phonebooks were then used to send SMS spam message offering a URL to download the app to each contact. Interestingly, the “from” field contained the mobilephone number of the user from which the data is copied.

On receiving the information, both operating system vendors have removed the Find and Call app from Apple Store and Google Play. This malicious app was created by a Singapored-based company Wealth Creation Laboratory, who blames bugs in its beta software for causing the spam-like behaviour.