McAfee has discovered an Android app that contains traces of Windows malware. The app in question, KFC WOW @ 25 Menu, has been spotted on Google Play and, while it does not pose a threat to Android devices, is dangerous for Windows computers.
McAfee discovered that the APK file contains a Windows worm that is capable of spreading over a network.
What's interesting is that the malware is not capable of executing itself. Instead, it can infect a computer if the APK is opened and run.
McAfee researchers believe the malware likely ended up in the KFC Menu app because the developer's computer was infected and the directory containing the software's code contained a copy of the worm.
Another similar example is an email application that is pre-installed on many Android tablets. The program has an HTML file that contains a piece of malicious JavaScript code.
It is possible that the malicious JavaScript infected all HTML files on the app maker's computer, including the file that is part of the Android email app.
