SMS-Based Trojan Targeting Android Smartphones

[Gregory Hicks <ghicks () hicks-net net>]

Courtesy ISN

Subject: [ISN] SMS-Based Trojan Targeting Android Smartphones 

http://www.informationweek.com/news/hardware/handheld/showArticle.jhtml?articleID=226600359

By Eric Zeman
InformationWeek
August 10, 2010

According to Kapersky Lab, it has discovered the first known Trojan to
be specifically targeted at Android smartphones. Kapersky classifies
the "malicious program" as a Trojan-SMS, which attacks users where it
hurts the most: their wallet.

The Trojan disguises itself as a media player application. The file
name is: Trojan-SMS.AndroidOS.FakePlayer.a (kinda gives itself away if
you're paying attention, don't ya think?). The file is just 13Kb and
has a standard .APK Android app extension. Once the Trojan has been
installed, it causes some serious trouble.

It takes hold of the device's SMS (texting) application and begins
sending text messages to "premium rate numbers" all on the low-down.
Premium rate SMS numbers are the SMS equivalent to the 1-900 numbers
from yesteryear. They cost users money -- in the form of charges on
their wireless account -- for messages sent to and/or received from the
number in question.

Kapersky says that Trojan-SMS is the most prevalent type of malware
attempting to take over smartphones. This particular Trojan is the
first to go after Google's mobile operating system, though Kapersky
says that Android devices have been infected with spyware before.

[...]


--
Visit InfoSec News!
http://www.infosecnews.org/

---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
                                        | Direct:   408.569.7928

People sleep peaceably in their beds at night only because rough men
stand ready to do violence on their behalf -- George Orwell

The price of freedom is eternal vigilance.  -- Thomas Jefferson

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.