•
Redistributed versions of free apps available in the Android Market make up 36% of the apps in the two alternative markets [fig 11].
•
Pirated versions of paid Android Market apps made up only 2% of the apps in the two alternative markets [fig 11].
Fig. 11 Looking inside the apps on the alternate markets that also appear for free or paid in the official Android Market (i.e. redistributed and pirated, respectively), we found that some were likely modified by a third party (i.e. repackaged) before being uploaded to the alternate market. Of the repackaged apps, many also requested access to more permissions than their legitimate counterparts. The additional permissions requested by repackaged apps often include access to location, contact information, phone information (e.g. phone number, IMEI, IMSI), Internet access, and the ability to place phone calls. The repackaging of these apps, along with the requests for additional access to sensitive information, is often the effect of a third-party adding an illegitimate ad network or malicious code having functionality such as making premium rate phone calls or sending premium rate SMS messages without the user’s knowledge. There have been multiple instances in the past few months where repackaged apps in alternative Android markets have served as hosts for malware. The Geinimi Trojan found earlier this year is an example of this. •
•
Nearly 11% of apps in alternative markets that are also available in the Android Market are repackaged (i.e. likely modified by a third party). Of the repackaged apps, nearly a quarter request more permissions than the original version in the Android Market [fig 12]. Over 6% of apps in alternative markets that are also available in the Android Market are pirated. Of these, approximately 14% request additional permissions than their paid counterparts [fig 12].