
Reports surface earlier this week concerning malware discovered in the Android Market, which security specialists Symantec labelled it the ‘biggest ever’ threat found and estimated up to 5 million infections to date.
There were 13 apps discovered to contain the trojan dubbed Android.Counterclank, which recorded information such as the brand of phone it was installed on, various unique numbers such as the IMEI, as well as setting an alternative browser homepage and adding a new search shortcut to the homescreen.
After continued examination of the apps, and Counterclank’s relationship with another Android trojan named Tonclank, Symantec has confirmed the code comes from the same company. Subsequently, it now believes that rather than being malicious, Counterclank is actually part of an advertising network.
This doesn’t mean it’s not annoying though, but seems to put it more in the category of ‘adware’ rather than ‘malware’. Symantec has asked Google to remove the apps anyway, but so far Google has refused, saying they meet its Terms of Service.
In its official blog post on the subject, Symantec recognizes that to begin calling problematic software found on mobile platforms ‘adware’, ‘spyware’ or ‘malware’, could cause the same level of confusion it did when referring to Windows several years ago.
Instead, the plan is to inform users of what it calls ‘undesired applications’ and let them make up their own minds on what to do. Its security software won’t delete this software either. Whether this approach will see an increase in apps using Counterclank’s aggressive style of delivering ads remains to be seen.





