Fake ID Detector

Fake ID is an Android vulnerability that allows applications to impersonate other applications by copying their identity that can then be used for malicious purposes.

Allows for malicious apps to impersonate other applications by copying their identity – their digital certificate(s) used to cryptographically sign the application package (APK file) – and combining it with their own signature making a chain whereby the parent signature (also known as the “issuer”) can be used to verify the child signatures.

The Fake ID vulnerability, is present in most Android versions 2.1 and above. Depending on the hardware manufacturer and the version of Android running on your device you may be vulnerable to one or more of more privileged attack vectors as described by BlueBox who discovered the vulnerability and of course, given this problem relates to chains of certificates, a hacker could chose to include many certificates to cover all of these options, and more, in their specifically crafted malware.

McAfee Fake ID Detector enables you to quickly discover if your applications contain the exploit.

Privacy Protection

Malicious

http://blogs.mcafee.com/mcafee-labs/beware-impostor-android-apps