New Android Trojan secretly buys apps
July 9, 2012 by Network Security
Filed under Android
Even though harmful Android applications can sometimes be found on Google Play, China’s third-party on the internet Android marketplaces are known for providing them byhundreds figures, if not thousands figures.
Most of them do one of two things: gather personal and system information, or deliver out expensive information to high paying numbers. But now and then, an app that doesn’t follow that design.
Researchers of cellular security company TrustGo have lately uncovered a new type of Android viruses whose objective is to surreptitiously buy applications and other material from China Mobile’s Mobile Market without notifying and requiring the authorization of the individual.
Dubbed MMarketPay, the Malware comes rebranded with a number of genuine travel and climate applications, and is currently offered on no less than nine of the internet Chinese marketplaces.
According to the scientists, it has already been downloadable and likely set up by more than 100,000 customers.
The harmful applications uses the easily subverted Mobile Marketplace transaction work-flows.
After having signed into the market’s website, the malicious app can instantly place purchases for compensated applications and other material. M-Market delivers a confirmation code via SMS, which is then offered to M-Market for confirmation.
Once the confirmation is finished, the app is downloaded instantly, and China suppliers Mobile contributes the transaction to the client’s mobile phone expenses.
The Trojan is able to indentify obtained SMS information in order to gather the verification code sent by M-Market and, if a CAPTCHA picture is invoked, it is also able to send it to a remote hosting server in search for the correct response.
In the end, the customers is left with an surprising high mobile phone bill.
