AndroidOS_FakeKSec.GCLB

April 22, 2024

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Mariel Alamag

---

 ALIASES:

Trojan-Dropper.AndroidOS.Wroba.p (KASPERSKY)

 PLATFORM:

Android

 OVERALL RISK RATING:

 DAMAGE POTENTIAL:

 DISTRIBUTION POTENTIAL:

 REPORTED INFECTION:

 INFORMATION EXPOSURE:

• 
  Threat Type: Trojan Spy
• 
  Destructiveness: No
• 
  Encrypted:
• 
  In the wild: Yes

  TECHNICAL DETAILS

File Size:

2394514 bytes

File Type:

APK

Memory Resident:

No

Payload:

Collects system information, Steals information

Other Details

This Trojan Spy does the following:

• Disguised as "KDDI Security," a security application, it presents itself as a security tool while engaging in data collection.
• The application accesses and leaks users' phone numbers.
• It reads, sends, and deletes SMS/MMS messages.
• The application gathers personal contacts stored on the device.
• Signed by a Debug Certificate.

  SOLUTION

Minimum Scan Engine:

9.800

Trend Micro Mobile Security Solution

Trend Micro Mobile Security Personal Edition protects Android and iOS smartphones and tablets from malicious and Trojanized applications. It blocks access to malicious websites, increase device performance, and protects your mobile data. You may download the Trend Micro Mobile Security apps from the following sites:

• Trend Micro Mobile Security and Antivirus in Google Play
• Trend Micro Mobile Security in iTunes

Did this description help? Tell us how we did.