Crave's Eric Mack looks at some of the digital threats taking advantage of the Games and at how to protect yourself.
When the Summer Olympics roll around, you can count on some intense competition in key events like gymnastics. But for 2012, the action isn't just on the mat. It seems that distributing and battling malware and phishing efforts disguised as Olympics apps and info are practically an exhibition sport this summer.
An app called "London Olympics Widget" seems harmless enough, but according to Webroot's security blog, it actually rifles through your contacts, device info, and text messages.
It's no longer available via the Google Play store, but it's still listed on an Australian site aggregatingAndroid apps, where there are plenty of the telltale signs of skeezy code, including this odd Gmail contact address and English grammar that's not quite right:
Any issues or questions just feel to email us:
Lebara.sydney.au@gmail.com
We will reply you as soon as possible. (no more than 24 hours)
Lebara.sydney.au@gmail.com
We will reply you as soon as possible. (no more than 24 hours)
Other bits of evidence suggest the app isn't what it appears to be: it's digitally signed from New Delhi, and its own screenshots reveal that, well, it's a pretty lame-looking widget.
GFI Software also claims to have found Russian servers hosting sites posing as legit app stores to push out the nasty code to unsuspecting Android devices, making the former Soviet republic competitive in both the medal and malware count this year
