Analysis by: Yang Yang
 THREAT SUBTYPE:

Information Stealer

 PLATFORM:

Android

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 INFORMATION EXPOSURE:

  • Threat Type: Spyware

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

Infection Channel: Downloaded from the Internet

This Spyware may be unknowingly downloaded by a user while visiting malicious websites. It may be manually installed by a user.

It receives commands from a server that may be controlled by a bot or a malicious user.

  TECHNICAL DETAILS

File Size: 290246 bytes
File Type: APK
Memory Resident: Yes

Arrival Details

This Spyware may be unknowingly downloaded by a user while visiting malicious websites.

It may be manually installed by a user.

Denial of Service

This Spyware receives commands from a server that may be controlled by a bot or a malicious user.

Mobile Malware Routine

This Spyware acts as an SMS relay which receives SMS to be forwarded from a remote URL. As a result, affected users may be charged for sending SMS without their knowledge

  SOLUTION

Minimum Scan Engine: 9.850

Step 1

Scan your computer with your Trend Micro product to delete files detected as ANDROIDOS_AutoSMS.AXBLC. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check the following Trend Micro Support pages for more information:

Step 2

Trend Micro Mobile Security Solution

Trend Micro Mobile Security Personal Edition protects Android and iOS smartphones and tablets from malicious and Trojanized applications. It blocks access to malicious websites, increase device performance, and protects your mobile data. You may download the Trend Micro Mobile Security apps from the following sites:


Did this description help? Tell us how we did.