ANDROIDOS_FAKEMOBI.D

This malware has received attention from independent media sources and/or other security firms.

To get a one-glance comprehensive view of the behavior of this Trojan, refer to the Threat Diagram shown below.

This Trojan may be unknowingly downloaded by a user while visiting malicious websites.

Arrival Details

This Trojan may be unknowingly downloaded by a user while visiting malicious websites.

Other Details

This Trojan does the following:

• This is the Trend Micro detection for an Android malware that disguises itself as a Media Player application.
• This malicious Dalvik Executable (.DEX) file is contained in an Android Package (.APK) file, which may be installed manually by a user.
• The package bears the following icon:
  
• While installing, it displays the following Russian message which translates to Please wait...
  
  
• It attempts to send out the following text messages to premium numbers 7132 and 4161:
  844858
  845784
  846978
  846996
• Once the messages are sent, affected users are charged according to the respective number's rate.