Android users warned of covert GPS spying app

An Android app called Tap Snake installs surveillance software

Security firms have warned of an Android application that installs a commercial spying tool on handsets.

Tap Snake looks like a clone of the 1970s game Snake, but once installed it runs a piece of Russian surveillance software called GPS SPY. The software updates a central server on the user's position every 15 minutes, and cannot be turned off.

During installation the game asks for the right to access certain handset functions, including GPS. The user must agree to this, but Symantec warned that people need to be more aware of the dangers of simply allowing installation of new code.

"It shows how new mobile threats are evolving and emerging," said the Symantec Security Response team in a blog post.

"Our advice for users of smartphones is to be careful of what you install, and always check whether the application you're installing is asking for rights it doesn't really need."

F-Secure also warned about the software, saying that the app will be removed from the Android Market and that Google should consider using its Remote Application Removal feature to eliminate the software completely.

Google has used this so-called Android kill switch before, but it is not likely to be considered in this case since the download rates for Tap Snake are low and mobile security software can remove the rogue application easily.

However, a Google spokesman told V3.co.uk that people need to be on their guard, and should take note of reviews and comments from other users in the Android Market.

"When installing an application, users see a screen that explains clearly what information and system resources the app has permission to access, such as a phone's GPS location," he said. "We consistently advise users to only install apps they trust."