Affected Operating Systems: Android, BlackBerry

Discovery Date: 2010-02-24

Overview: SpyBubble is a spyware application that affects Android and BlackBerry platforms

Detailed Information: SpyBubble is a spyware application that affects Android and BlackBerry platforms.  SpyBubble must be installed manually, therefore an attacker must gain physical access to the intended target device.  SpyBubble offers the following capabilities:

• Call Monitoring
• SMS/MMS Monitoring
• GPS Location Monitoring

For Android, SpyBubble comes in the form of bubb.apk and is installed on the device as com.spybubble. SpyBubble successfully hides itself from casual detection by an unsuspecting user by not placing an application icon in the applicaton drawer.

For BlackBerry, SpyBubble arrives as a .zip file that contains the following files:

• bubb.cod
• bubb.jad

SpyBubble installs as “bubb” on BlackBerry devices.  As with Android, SpyBubble for BlackBerry successfully hides itself from detection by not supplying an application icon to the user.

Detection and Removal: Detected and removed with SMobile VirusGuard virus definitions from 2010-02-24