Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le août 16, 2012, 00:00:55
-
Blog: Android Security Suite Premium = New ZitMo
On the 4th of June 2012 we found 3 APK files of ~207 kb in size each heuristically detected by our engine as HEUR:Trojan-Spy.AndroidOS.Zitmo.a. All these applications are malicious and were created to steal incoming SMS messages from infected devices. SMS messages will be uploaded to a remote server whose URL is encrypted and stored inside the body of the Trojan. We found 3 more APK files with exactly the same functionality on 8th, 13th and 14th of June. So there are at least 6 files which pretend to be ‘Android Security Suite Premium’ but in fact were created only for stealing incoming SMS messages.
Source: Blog: Android Security Suite Premium = New ZitMo (http://www.securelist.com/en/blog/208193604/Android_Security_Suite_Premium_New_ZitMo)