[Trend]First Kotlin-Developed Malicious App Signs Users Up for Premium SMS Services

[igor51]

First Kotlin-Developed Malicious App Signs Users Up for Premium SMS Services

We spotted a malicious app (detected by Trend Micro as ANDROIDOS_BKOTKLIND.HRX) that appears to be the first developed using Kotlin—an open-source programming language for modern multiplatform applications. The samples we found on Google Play posed as Swift Cleaner, a utility tool that cleans and optimizes Android devices. The malicious app, which has 1,000-5,000 installs as of writing, is capable of remote command execution, information theft, SMS sending, URL forwarding, and click ad fraud. It can also sign up users for premium SMS subscription services without their permission.

Post from: Trendlabs Security Intelligence Blog - by Trend Micro

First Kotlin-Developed Malicious App Signs Users Up for Premium SMS Services

Source: First Kotlin-Developed Malicious App Signs Users Up for Premium SMS Services