In November we saw Mobile Spy come out with a version for Android. Mobile Spy has been labeled spyware by major AV vendors because it actively hides itself from the user and allows remote administration of the application and monitoring capabilities. Since then, in January, MobiStealth came out with a version for Android. Also in December Android developer Droid09 released a banking application into the Market that was phishing for back account information. As far as I know, Mobile Spy and MobiStealth are not and never have been available on the Market, so the user would have to allow the device to run apps that aren't downloaded from the Market. However, both of these apps require physical access to the device to install and for initial configuration, so making that simple change is not going to be difficult. The Droid09 app was quickly recognized for what it was and has since been removed from the Market, but not before an unknown number of users downloaded and installed the app. Requests to Google sent from AV vendors for Android asking for a sample of the phishing app have gone unanswered, so no signature has been created, at least that we know. Most reputable AV vendors for Android "should" have signatures for Mobile Spy and for MobiStealth. That's really all that we know about for Android at this point...if I'm missing anything, please someone let me know.