
Image via Wikipedia
Yikes. This is a quite shocking news.
Over the weekend Google confirmed that up too 56 applications where malware in the Android market.
The worst part is, is that up to 260,000 Android devices may have been infected.
If you have been infected Google says;
We are pushing an Android Market security update to all affected devices that undoes the exploits to prevent the attacker(s) from accessing any more information from affected devices. If your device has been affected, you will receive an email from android-market-support@google.com over the next 72 hours. You will also receive a notification on your device that “Android Market Security Tool March 2011” has been installed. You may also receive notification(s) on your device that an application has been removed. You are not required to take any action from there; the update will automatically undo the exploit. Within 24 hours of the exploit being undone, you will receive a second email.
This affects android devices with software version 2.2.1 and lower (including my phone, eep!). Google says a patch is being released for earlier versions…but its up to carriers to send the update to devices.
The infected apps would install into your phone, and gain root access. Google says no personal information was submitted but could have been.
Google also says that they are trying to harden security in the android market, and fix these issues.
Read more of the malware out break at the google blog.