Security researchers from F-Secure have managed to locate an interesting Android hack tool identified as HackTool:Android/UsbCleaver.A, allows anyone to steal sensitive information from a PC by connecting an Android phone to it.
The hacker must install an application called USB Cleaver on his/her Android device. Once executed, the app downloads additional files from a remote server.
These files are actually various utilities designed to retrieve certain pieces of information from a Windows computer.
When the Android device is connected to the Windows PC, it automatically starts collecting browser passwords, the Wi-Fi password and network information.
The app allows the user to select what type of information should be harvested. The gathered information is copied into a folder from the Android device’s SD card.
Fortunately, there’s a simple way for users to protect themselves against such hack tools. That’s because the app creates an autorun.inf file that triggers the automatic gathering of information.