After removing over 50 malware-infected apps from its store, Google has also started remotely deleted the apps from users’ phones in which they were downloaded.
In an official blog, Google said the company was pushing an Android Market security update to all affected devices that undoes the exploits.
Last week, Google had withdrawn the malware-infected apps, which are believed to be exploited by malware writers because of the openness of the Android platform.
Google had confirmed the infected apps contained rootkit malware, a program that sneaks into the root access of a victim’s smartphone and downloads additional code onto the device without the knowledge of the owner. The malware could then send personal details to remote server.
As many as 55 apps on Google’s Android store were discovered to be infected with the malware named "DroidDream". Android Police, a news site on Google’s OS, said the most dangerous aspect of the rootkit malware is its ability to download codes.
Apprehending loss and transmission of users’ data and to protect those who downloaded a malicious application, the company has taken many steps including removal of the malicious applications from Android Market, suspending the associated developer accounts, and contacting law enforcement.
The company is also remotely removing the malicious applications from affected devices by using the remote application removal feature.
Google said, "We are pushing an Android Market security update to all affected devices that undoes the exploits to prevent the attacker(s) from accessing any more information from affected devices. If your device has been affected, you will receive an email from android-market-support@google.com over the next 72 hours. You will also receive a notification on your device that "Android Market Security Tool March 2011" has been installed. You may also receive notification(s) on your device that an application has been removed. You are not required to take any action from there; the update will automatically undo the exploit. Within 24 hours of the exploit being undone, you will receive a second email."
The search engine company also assured users saying it is adding a number of measures to help prevent such incidents in future and working to find the fix for the underlying security issues.
