Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Trojan-Spy:Android/Smforw


Aliases:


Trojan-Spy:Android/Smforw
android.SMForw
AndroidOS.SmForw
Andr/KSmsSpy-A
Android.Fakeguard

Malware
Trojan
Android

Summary

Trojan-Spy:Android/Smforw variants silently forward incoming SMS messages on an infected device to a remote server.



Disinfection & Removal

F-Secure's Mobile Security product blocks installation of this program with default settings.



Technical Details

Trojan-Spy:Android/Smforw variants may be installed on a mobile device as part of the payload of a PC-based trojan, Droidpak. When this trojan infects a Windows system, it downloads a mobile app onto the machine and then attempts to install it onto any Android devices connected to the system by a USB cable. For installation to be successful, the device must have the setting 'Enable USB debugging' enabled.

When installed, SMforw variants will monitor and intercept incoming SMS messages and forward them to a remote server.







Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.

Scan and clean your PC




F-Secure Online Scanner will scan and clean your PC in just a few minutes for free