Analysis by: Peter Yan
 THREAT SUBTYPE:

Information Stealer, Rooting Tool

 PLATFORM:

Android

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 INFORMATION EXPOSURE:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  TECHNICAL DETAILS

NOTES:

This Android malware asks for device administrator permission, disguising itself as an Android system package installer. It steals the user's account details and other information, as well as prevent uninstallation.

It registers itself as a device administrator:

It asks the user to give it device administrator privileges.

With administrator privileges as well as the same icon and description as the legitimate installer, it prevents itself from being uninstalled. Should the user attempt to do so anyway, the app will not appear in the uninstall list.

It steals user's account details, and send the stolen information through SMS.

It also registers an SMS receiver to intercept the user's incoming SMS messages.

  SOLUTION

Minimum Scan Engine: 9.700

Step 1

Remove unwanted apps on your Android mobile device

[ Learn More ]

Step 2

Trend Micro Mobile Security Solution

Trend Micro Mobile Security Personal Edition protects Android smartphones and tablets from malicious and Trojanized applications. The App Scanner is free and detects malicious and Trojanized apps as they are downloaded, while SmartSurfing blocks malicious websites using your device's Android browser.

Download and install the Trend Micro Mobile Security App via Google Play.


Did this description help? Tell us how we did.