Security firm Symantec has revealed a fake Google update distributed through third-party markets.
The company said late last week it had found a new application called the “Android Market Security Tool”, distributed with the same name as the update that Google used to remove malware from users’ devices.
“What is shocking is that the threat’s code seems to be based on a project hosted on Google Code and licensed under the Apache License,” Symantec’s Mario Ballano wrote.
“This threat seems to be able to send SMS messages if instructed by a command-and-control server,” Ballano added.
Last week Google confirmed it would remotely delete malware on users’ handsets after an infected app made its way on to the Android Market.
Patrick Stafford is a freelance journalist and a former deputy editor of SmartCompany.
