New Android Trojan Virus Discovered, Dubbed “Gemini”

By Tony Tran in Thu, Dec 30, 2010

Hello there! If you are new here, you might want to subscribe to the RSS feed for updates on this topic.

Today, Lookout, a mobile security company, has released some information about a new virus found in the wild, and it’s targeting Android phones.

The virus comes to us by way of China, dubbed as the “Gemini”. Here’s the list of the app which attaches itself to legitimate applications:

Monkey Jump 2
Sex Positions
President vs. Aliens
City Defrense
Baseball Superstars 2010

The specific information it collects includes location coordinates and unique identifiers for the device (IMEI) and SIM card (IMSI). At five-minute intervals, Geinimi attempts to connect to a remote server using one of ten embedded domain names. A subset of the domain names includes www.widifu.com, www.udaore.com, www.frijd.com, www.islpast.com and www.piajesj.com. If it connects, Geinimi transmits collected device information to the remote server.

The trojan doesn’t come to your Android phone by the way of the official Android Market. So, stay away with 3rd party or Chinese Market.

Incoming search terms:

3rd party, Android, Android Market, Android trojan, Android virus, Chinese Market, Gemini