[Qtx]

Go the FAQ page of the app or similar and click on theSky email link. If an error comes up or your email client loads up with the bskyb email address, then you know your app is ok.

I pulled apart the code of the apps I have (took the code files out of the apk) installed and can see they are ok.

The SEA have quite a few high profile companies in their hacked portfolio. Sometimes other hacks give details that can be used for hacks like this but the SEA often spear-phish which enables them to target specific companies. As to where that leads them, this time it was likely to one of Sky's developers or whoever there uploads the apk's to the market.

They either got Sky's login details to the market and uploaded their own modified APK, or modified the apk on a developers machine they had access to. Security processes can be put in place to check checksums of files along the development process, which I guess Sky will implement if the internal machines wee compromised.

I would like to see one of the modified apk's to a diff check to see what the SEA had changed. I am guessing there is no dangerous code, just images changed as its very simple to do and recompile the apk.