Virus sends costly messages from Android phones

August 11, 2010
A mobile phone using Android phone software is seen at a telecom convention in Las Vegas. Mobile security firm Lookout has warned that a booby-trapped Movie Player application is infecting Android phones in Russia with a virus that sends costly text messages.

Mobile security firm Lookout on Tuesday warned that a booby-trapped Movie Player application is infecting Android phones in Russia with a virus that sends costly text messages.

Russia-based Kaspersky Lab discovered the malicious "Trojan" code hidden in a media player application people are enticed to download onto smartphones.

"The new penetrates smartphones running Android in the guise of a harmless media player application," Kaspersky said in a blog post.

"The Trojan uses the system to begin sending SMSs to premium rate numbers without the owner’s knowledge or consent, resulting in money passing from a user's account to that of the cybercriminals."

The Trojan has apparently only affected handsets operating on Google-backed Android software in Russia.

The Media Player program does ask users to authorize "services that cost you money" prior to installation, according to Lookout, which advised people to protect themselves by refusing to grant such permission.

"With the discovery of this new Trojan, it is more important than ever to pay attention to what you're downloading," Lookout said.

"Stay alert to ensure that you trust every app you download".

Explore further: New trojan detected for Microsoft Word

Related Stories

How Secure are iPhone and Android Apps

April 1, 2010

(PhysOrg.com) -- Today's smartphones are pocket size computers that can be customized by downloading applications. This is what makes a smartphone vulnerable to cybercriminals. In this article we will examine how an iPhone ...

Smartphones tempting new targets for hackers

July 30, 2010

Software security experts warn that mobile phones are tempting targets for hackers in a world where people eagerly invite strange applications onto handsets packed with personal data.

Recommended for you

Netherlands bank customers can get vocal on payments

August 1, 2015

Are some people fed up with remembering and using passwords and PINs to make it though the day? Those who have had enough would prefer to do without them. For mobile tasks that involve banking, though, it is obvious that ...

7 comments

Adjust slider to filter visible comments by rank

Display comments: newest first

jayn
Aug 11, 2010
This comment has been removed by a moderator.
gunslingor1
not rated yet Aug 11, 2010
"Virus sends costly messages from Android phones"

"With the discovery of this new Android Trojan, it is more important than ever to pay attention to what you're downloading," Lookout said.

Well, at least one of you got it right. This is a Trojan, not a Virus as discribed by the article. A Virus needs to be able to self replicate and infect other devices from any other infected device.
CSharpner
not rated yet Aug 11, 2010
Luckily, Android phones tell you that an app wants to send SMS messages before you install ir, giving you the oportunity to bail out and not install.
gunslingor1
not rated yet Aug 12, 2010
I think this trojan disabled that ability.
CSharpner
not rated yet Aug 16, 2010
I think this trojan disabled that ability.


According this from the article...

The Media Player program does ask users to authorize "services that cost you money" prior to installation, according to Lookout


It would seem that the app itself sends it without the need to disable that security feature and it only happens if people ignore the warning. If it /does/ disable it, i'd like to know for sure, since I'm an Android user.
gunslingor1
not rated yet Aug 16, 2010
I got the impression that message was at installation, and not every time you run the thing.
Aloken
not rated yet Aug 18, 2010
During installation every android application reports which parts of your phone's system will be used (gps, compass,sms,calls,storage,etc...)

If you ignore that and install anyway then its your fault. "Yes that's all I ever wanted, a media player that sends out SMS" ...really...

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.