Olympics-related malware goes on a global phishing trip

This app gladly reads your text messages in exchange for upchucking a little bit of Olympics info.

(Credit: AndroidZoom)

When the Summer Olympics roll around, you can count on some intense competition in key events like gymnastics. But for 2012, the action isn't just on the mat. It seems that distributing and battling malware and phishing efforts disguised as Olympics apps and info are practically an exhibition sport this summer.

An app called "London Olympics Widget" seems harmless enough, but according to Webroot's security blog, it actually rifles through your contacts, device info, and text messages.

It's no longer available via the Google Play store, but it's still listed on an Australian site aggregating Android apps, where there are plenty of the telltale signs of skeezy code, including this odd Gmail contact address and English grammar that's not quite right:

Any issues or questions just feel to email us: Lebara.sydney.au@gmail.com We will reply you as soon as possible. (no more than 24 hours)

Other bits of evidence suggest the app isn't what it appears to be: it's digitally signed from New Delhi, and its own screenshots reveal that,... [Read more]