http://{BLOCKED}or-android.ru

This is a fake Google Play site which hosts malicious apps, including the rogue app London2012-Official Game. The said site also contains a QR code and download button. Once unsuspecting users clicked the download button, it redirects to a web hosting site that serves a variant of ANDROIDOS_SMSBOXER malware family. This malware is notorious for sending messages to premium numbers without the user’s consent.