CA security finds Android Trojan which records phone calls. Trojan is triggered when the Android device places or receives a phone call. It saves the audio file and related information to the phone’s microSD card, and includes a configuration file with information on a remote server and settings used by the trojan. Trojan presents itself as an “” that requires users to press an “install” button for it to insert itself in the phone. Once installed, the Trojan records all incoming and outgoing calls to a directory on the microSD.
Source: https://thehackernews.com/2011/08/ca-security-finds-android-trojan-which.html