Trojan-SMS.AndroidOS.Stealer

Parent class: TrojWare

Trojans are malicious programs that perform actions which are not authorized by the user: they delete, block, modify or copy data, and they disrupt the performance of computers or computer networks. Unlike viruses and worms, the threats that fall into this category are unable to make copies of themselves or self-replicate. Trojans are classified according to the type of action they perform on an infected computer.

Class: Trojan-SMS

Programs of this type are used to send text messages from infected mobile devices to premium rate numbers that are hard code into the Trojan’s body.

Read more

Platform: AndroidOS

Android is an open-source operating system developed by Google for mobile devices, such as tablets, smartphones, and watches. Based on a Linux kernel and the Dalvik virtual machine (older versions) / Android Runtime environment (newer versions).

Description

These malicious programs send SMS messages to premium-rate short numbers without the user's knowledge. The program configuration is stored in an encrypted JavaScript script. Notably, this malware family is widespread not only in the CIS countries (where most malware of this type is concentrated), but in other countries as well. Malicious programs of this family support a large number of premium-rate numbers in many countries.

Top 10 countries with most attacked users (% of total attacks)

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com