Malicious App In Android Market

dumbnose writes to let us know that a fraudulent app that attempts to steal bank information has made it to the Android app store. From the alert: "NOTICE: Users of mobile devices with Android software may have noticed several applications available for download in the Android Marketplace. If you see any applications provided by the user Droid09, please do not download these applications. Android applications provided by Droid09 are fraudulent. Please remove any applications by Droid09 from your mobile device and contact your mobile provider to evaluate whether any other applications or information stored on your mobile device have been compromised." Multiple marketplaces are possible in the open Android ecosystem. Might we see the emergence of a marketplace distinguished by an iPhone-like app vetting process?

Comments

Re:Check for the signed label!

[PopeRatzo]

This is something that is far more unlikely to happen on the iPhone

Anyone want to bet that "Droid09" has an address somewhere near Cupertino?

Where is the evil DRM protection when you need it?

[Punto]

on any other platform, you wouldn't need to remove software from "Droid09", your overlord would remove it for you, along with any other subversive material that might be on the device that you're borrowing from them

In another time...

[_KiTA_]

Allow open development, and you've basically got a platform that the bad guys can target. There's already standards for signing code to prove that an app came from who you thought it did.

Steve? Is that you?

-B. Gates

Re:Check for the signed label!

[Ihmhi]

The sort of people who check MD5 hashes, of course.