Android botnet pushes out drug spam

Spam sent from Yahoo!

A botnet of infected Android phones has been discovered pumping out pharmaceutical spam.

Microsoft engineer Terry Zink found the network operating across Asia, the former Soviet states and South America. 

Sophos researchers verified the botnet, which most likely infected users via less reputable Android app markets. 

Google denied the botnet was based on Android devices.

Zink conceded the email headers may have been spoofed and the signature tagline "Yahoo Mail for Android" faked, but that was less likely than the existence of the droid bot.

Credit: Sophos

Android botnets have been created by researchers in the past, but this was the first known instance of one network used for malicious purposes. 

Zink said the Android phones had sent spam from a victim's Yahoo! email account

"We’ve all heard the rumours, but this is the first time I have seen it – a spammer has control of a botnet that lives on Android devices," Zink said.

"This ups the ante for spam filters.  If people download malicious apps onto their phone that capture keystrokes for their email software, it makes it way easier for spammers to send abusive mail."

Sophos researcher Savio Lau spotted animated graphics within the spam emails, an inclusion that could lead to expensive phone bills. 

"You can imagine the cellular phone bill you might receive if your phone is being used to download and spam out thousands of these messages," Sophos scribe Chester Wisniewski said.