Security firm Lookout have identified thirty two sperate cases of apps containing the BadNews bug. The bug sends texts to premium rate services clocking up huge bills for those with infected handsets. The bug had latched onto applications from four different developers disguised as an advertising network meaning that the developers themselves were probably not responsible or even aware their apps contained the bug.
Google have acted swiftly and removed all infected apps and the accounts of the developers involved. Rather than misbehaving straight away the bug would lie dormant for a poetic of up to a fortnight before being activated by a control server. At this point the bug would install an app called AlphaSMS disguised as an update fit Skype or Vkontaskte, a social networking app.
All the premium numbers used services from the former Soviet block. Lookout have estimated that infected apps may have been downloaded up to nine million times.