DroidDreamLight lurks behind legitimate Android apps

Legitimate Android apps that have been modified to carry malicious code have become a common sight in the Android Market and so pose serious security threats to all Android-based device users. We analyzed one particular malware known as DroidDreamLight and compiled our findings in this paper. DroidDreamLight, which affected 30,000–120,000 users in May 2011, is capable of stealing users' personal information and of sending stolen data to cybercriminals.