French Android Users Hit again by SMS Trojan

by

Share this news now.

Earlier this year, the SMS Trojan Foncy was discovered targeting French-speaking Android Users. Now, we’ve come across a new Trojan targeting them using a similar SMS scam.  The app pretends to be an app called BlackMart Alpha, which is already a little shady since it’s used to download apps that may otherwise cost money. This app is not found on Google Play and is not malicious in itself, but the fact that you can’t get it in the Google Play store makes it a prefect target for malware developers to make fake versions of it. Webroot detects this Trojan as Android.SMS.FakeB-Mart.  It works by sending premium SMS messages to two different numbers (81211 and 81038), which have both been involved with scams that add a hefty Euro charge to the victim’s phone bill. In one case, someone was scammed out of €89.85 , or $110.49. Once the malicious app is installed, it looks like the legitimate BlackMart Alpha app, but doesn’t completely load. A pop-up box opens stating that it’s loading with a increasing percentage. This tricks the user into thinking the app is loading while it’s really sending premium SMS messages in the background.

The app deletes any incoming SMS messages from 81211 to hide any confirmation SMS messages.

Being tricked by this fake blackmarket app when trying to download pirated apps could end up being a lot more expensive than just paying for the app from a trusted app market. Another lesson to always install apps from trusted markets.


Share this news now.
French Android Users Hit again by SMS Trojan by

Tags:



About the Author

Name: Nathan Collier
Role: Threat Team Member

Share this news now.

Nathan is a Senior Threat Research Analyst for Webroot, having been with the company since October 2009.  He started has career working on PC malware, but now spends most of his time in the mobile landscape researching malware on Android devices.  Because of his early adaptation to mobile security, Nathan has seen the exponential growth of mobile malware and is highly experienced in protecting Webroot customers from mobile threats. He also enjoys frequently traveling with his flight attendant wife, Megan, and is a competitive endurance mountain bike racer in Colorado.


Share this news now.
French Android Users Hit again by SMS Trojan by

Trackbacks

  1. בוטוקס בצידי הפה…

    … בוטוקס – השפעתו של הבוטוקס ורק אומר שזוהי תרופה, המחלישה שרירים וכשמוזרקת לאזורים המדוברים היא תחליק את הקמטים, במחשוף. להזדקן בכבוד איננו אומר שעליכם להתעלם מאיך שאתם נראים ולהשאר עם קמ… French Android Users Hit again by SMS Trojan « Webroot Thr…