ZDNet

July 9, 2012

New Android malware infects 100,000 Chinese smartphones

Share

New Android malware infects 100,000 Chinese smartphones

A new piece of malware has been discovered on more than 100,000 Android smartphones in China. It generates revenue by silently downloading paid apps and multimedia content from Mobile Market, an Android app store hosted by China Mobile, one of the largest wireless providers in the world.

TrustGo, which first discovered the malware, is calling this particular threat “Trojan!MMarketPay.A@Android” and has already found it on nine app stores: nDuoa, GFan, AppChina, LIQU, ANFONE, Soft.3g.cn, TalkPhone, 159.com, and AZ4SD. The security firm also disclosed the following eight package names for the malware:

  • com.mediawoz.goweather
  • com.mediawoz.gotq
  • com.mediawoz.gotq1
  • cn.itkt.travelskygo
  • cn.itkt.travelsky
  • com.funinhand.weibo
  • sina.mobile.tianqitong
  • com.estrongs.android.pop

MMarketPay.A works by placing malicious orders at Mobile Market. Normally, a Mobile Market customer receives a verification code via SMS after purchasing an app or multimedia content, which he or she has to input back into the market to start the download. China Mobile then adds this order to the customer’s phone bill.

MMarketPay.A automates this process and downloads as much as it can so that victims rack up huge phone bills. It finds paid content, simulates a click action in the background, intercepts the received SMS messages, and collects the verification code sent by Mobile Market. If a CAPTCHA image is invoked, the malware posts the image to a remote server for analysis.

In short, MMarketPay.A is a complex little bugger. If you’re using an Android device on China Mobile, you may want to check your phone bill and make sure there’s nothing suspicious on it.

Android lets you download and install apps from anywhere (provided you have the following option enabled: Settings = Applications = Unknown sources). If you want to minimize the chance of downloading malicious apps, please only use the official Google Play store.

See also:

Share





 
 

 
 

Barnes & Noble quits Nook tablets, stays focused on eReaders

(Image: Barnes Noble) A couple years ago I asked if there was a clear winner between a Kindle Fire and BN Nook Tablet. It turns out there is now, as Barnes Noble announced they will no longer manufacture color Android-based tab...
by Geek Staff
0

 
 
 

Sony announces 6.44 inch water-resistant Xperia Z Ultra for Q3

(Image: Sony) Sony recently announced the Xperia Z for T-Mobile and today offers up a competitor in the large smartphone, aka phablet, market with the Sony Xperia Z Ultra (PDF press release). CNET hands-on with the Xperia Z Ult...
by Geek Staff
0

 
 
 

10 tips for better battery life for Android phones

Previous | Next Image 1 of 11 How to get more battery life out of Android phones (and tablets) In the early days of Android it was a real chore to reach the end of a busy day with battery life left. That’s improved over...
by Geek Staff
0