The Spanish mobile operator Vodafone Spain has confirmed that three thousand users received infected microSD cards when purchasing mobile devices. The infected devices are HTC Magic mobile phones based on the Android platform.
The cards are infected with the Mariposa malware, which is used to steal various confidential data from the user’s computer. Vodafone Spain has launched an internal investigation to determine how the incident occurred, but it still claims that these are isolated cases and that the cards in other mobile devices are not infected. So far, there is no evidence that the source of the infection is the device manufacturer, HTC. Therefore, there is no reason to fear that other samples of this model, purchased from other operators, are infected. When the first infected samples appeared, the operator mentioned the possibility that they were factory-refurbished devices that were returned to sale.(www.cert.hr)