printer friendly version

Legitimate Android app causes users to infect friends with malware

BitDefender virus researchers have discovered a new piece of Android malware, baptised Android.Trojan.KuSaseSMS.

This mobile threat propagates by means of self-advertising links sent by unwary users via two clean online video stream viewers available on the Google Android Market, cleverly encouraging friends to infect each other.

The user has the option to send an SMS or an e-mail message to promote the respective viewers to their contacts and friends. If this option is chosen, a predefined text will be entered in the ‘default sms/e-mail client’. The SMS or e-mail will only be sent after the user chooses a recipient. The predefined text for both viewers contains the same link which actually takes the recipient to a malicious app, identified as Android.Trojan.KuSaseSMS. The Trojan sends six SMSs to number 10086 (a Chinese phone service number) and it blocks all SMSs coming from numbers beginning with 10.

Please read the full article with detailed pictures on the community security website MalwareCity.com: http://www.malwarecity.com/blog/legitimate-android-app-causes-users-to-infect-friends-with-malware-1110.html

Share this article:

Further reading: