New Android Malware: Android.TechnoReaper Found on Google Play

It hasn’t been a great week for the folks in charge of Google Play’s malware prevention department. One expects that there’s been plenty of overtime, lots of coffee – and more than a few headaches. 

That’s because, after finding that four (now removed) apps had been covertly installing the BadNews malware on up to 9 million Android devices, they’re now scrambling to thwart the latest android malware: Android.TechnoReaper. Kudos to security firm Webroot for catching this one.

Apparently, Android.TechnoReaper sneaks on to devices in the guise of a harmless-looking installation that promises to let users download new and exciting fonts (who doesn’t like those?).

However, once installed, it unleashes a malicious app that quickly goes to work capturing user SMS data, call logs, location and other activity, in order to send premium SMS messages without consent.

The android malware Android.TechnoReaper is just the latest – and certainly not the last – in a legacy of malware known as FakeInstallers, which attempt to commit SMS-related fraud. Last year, a McAfee blog claimed that more than 6 out of every 10 Android samples that the company processes hail from this dubious category.