SMS-Based Android Trojan

reprod · #1 (**permalink**) 08-10-2010, 05:49 PM

Just a friendly FYI to all of our Android users here... Who would download an app through SMS is beyond me but apparently people are...

http://www.phonescoop.com/news/item.php?n=6426

Security firm Kapersky Lab has issued a warning for users of Android handsets. Kapersky says it has discovered the first Trojan-SMS that specifically targets Android devices. The Trojan, named SMS.AndroidOS.FakePlayer.a, tricks users into downloading it by posing as a media player. After the 13Kb app is installed, it begins sending SMS messages to "premium rate numbers" unbeknownst to device owners. The result is that end users are hit with unwanted SMS-related charges on their wireless bill. Kapersky cautions that Android users pay close attention to the services that applications request to access before installation.

**rainfreak** · #2 (**permalink**) 08-10-2010, 06:52 PM

Moved to the General Android forum for all Android owners to see.

facemob · #3 (**permalink**) 08-11-2010, 01:50 AM

what????

**Karl** · #4 (**permalink**) 08-11-2010, 04:25 AM

just thought everyone should know

and maybe someone knows what the app name is

http://www.google.com/hostednews/afp...DaJCojRT6o90Xg

reprod · #5 (**permalink**) 08-11-2010, 10:49 AM

I said the same thing but technically this is something entirely capable of happening if you have the "Unknown Sources" checkbox in Settings > Applications checked off. The app can be installed and take control of your Messages application and send out malicious texts. I have yet to run into this item but apparently this is something that is happening on Android handsets.

No indication of which OS versions are affected.

jpwhre · #6 (**permalink**) 08-11-2010, 07:52 PM

Thanks for the heads up.

**Carla** · #7 (**permalink**) 08-11-2010, 07:59 PM

Merged "Virus sends costly messages from Android phones" into "SMS-Based Android Trojan".

jpwhre · #8 (**permalink**) 08-11-2010, 09:58 PM

I have been usinig lookout since it was flexilis. will this app find trojons and remove them, or is it just a system backup of contcacts and photos with remote wipe?

testacon · #9 (**permalink**) 08-13-2010, 12:41 PM

Does anyone know if these apps are in the App Store or are these side loaded apps? I just assumed that the App Store submission process actually checks to see if the programming code is rogue or not and doesn't discriminate based off of content censorship of the apps. Which is it? Censorship issues aside, if an App says it's a keyboard skin but the app places rogue random texts/calls then yes the app should be rejected and the author should be publicly ostracized! Does the store accept any and all apps submitted?

butterflieq · #10 (**permalink**) 08-21-2010, 08:33 PM

From my understanding, the app store is completely open and requires no authorization process. After the recent wallpaper app that forwarded personal info to china, Google is looking at revising the way apps go to the market. One of their concerns though is they don't want to end up like Apple and end up restricting everything.