Symantec has discovered multiple publisher IDs on the Android Market that are being used to distribute malware named ‘Android.Counterclank”. This is a minor modification of Android.Tonclank, a bot-like threat that can receive commands to carry out certain actions, as well as steal information from the device. Symantec has published a list of 13 applications that have this malware. Symantec posted:

For each of these malicious applications, the malicious code has been grafted on to the main application in a package called “apperhand”. When the package is executed, a service with the same name may be seen running on a compromised device. Another sign of an infection is the presence of the Search icon above on the home screen.

The 13 apps are Counter Elite Force, Counter Strike Ground Force, Counter Strike Hit Enemy, Heart Live Wallpaper, Hit Counter Terrorist, Stripper Touch girl, Balloon Game, Deal & Be Millionaire, Wild Man, Pretty women lingerie puzzle, Sexy Girls Photo Game, Sexy Girls Puzzle and Sexy Women Puzzle.

According to Symantec, the combined download figures of all the malicious apps indicate that Android.Counterclank has the highest distribution of any malware identified so far this year.