ANDROIDOS_LUVRTAP.B
Premium Service Abuser
Android OS
Threat Type: Trojan
Destructiveness: No
Encrypted: No
In the wild: Yes
OVERVIEW
This Trojan has a certain service which enables itself to automatically start at boot. It connects to a remote site to get premium-rate numbers where it will send a message to. The IMSI and location of the affected phone are also sent by this malware a remote site.
This Trojan may be unknowingly downloaded by a user while visiting malicious websites. It may be manually installed by a user.
TECHNICAL DETAILS
737,838 bytes
DEX
No
03 Aug 2011
Sends messages to premium rate numbers
Arrival Details
This Trojan may be unknowingly downloaded by a user while visiting malicious websites.
It may be manually installed by a user.
NOTES:
It has the following service which enables itself to automatically start at boot:
- core
It connects to the following remote site to get premium-rate numbers where it will send a message to. The IMSI and location of the affected phone are also sent by this malware to the following remote site:
- www.{BLOCKED}re.com/careu/positionrecorder.asmx/
- www.{BLOCKED}re.com/careu/VAD.asmx/
As of this writing, the premium-rate numbers retrieved by the malware are as follows:
- {BLOCKED}690102
- {BLOCKED}760000
The message to be sent is the following:
ax360
SOLUTION
8.900
1.123.00
08 Aug 2011
Step 1
live casino online Mobile Security Solution
protects Android smartphones and tablets from malicious and Trojanized applications. The App Scanner is free and detects malicious and Trojanized apps as they are downloaded, while SmartSurfing blocks malicious websites using your device's Android browser.
.
Step 2
Remove unwanted apps on your Android mobile device