Bottle with Tasks for Android (air.buttlRus) Trojaned Distribution
Mobile Phone / Hand-held Device
Loss of Integrity
Virus / Malware
Discovered in the Wild
Bottle with Tasks for Android (air.buttlRus) by RoyalGames Ltd has been found to contain the BadNews malware. The BadNews family of malware is designed to look like a standard advertising network SDK and can be found in a variety of applications. Once installed into an application, it has the ability to spoof news messages, prompt users to install arbitrary applications, send sensitive information to a remote server, or push additional malware to the device. In this case, the software was using AlphaSMS malware to send premium-rate SMS messages.
Currently, there are no known upgrades or patches to correct this vulnerability. It is possible to temporarily mitigate the flaw by implementing the following workaround: uninstall the application until the developer has released a new version without the infected library. Google has removed this application from the market pending a fix.