Trojan:Android/Fakeinst.HB is a repackaged clone of a popular, free racing game. Unlike the original, the repackaged clone requires the user to pay a charge, supposedly to "access higher game levels".
F-Secure's Mobile Security product automatically blocks installation of this program.
The original game is a highly popular car racing game available, completely free, on the Google Play Store. Trojan:Android/Fakeinst.HB however includes a routine that demands payment to continue to play the game.
During game play, the trojan displays an alert message every ten minutes informing the user that they must pay, supposedly to gain access to the higher game levels. A varying scale of payments is listed (in Vietnamese dong).
The user is instructed to make payment either by scratch cards or by SMS. If the user opts to send an SMS, the app will send an SMS message to a given number.
If the user refuses to pay and ignores the repeated messages, after a period of time they are sent to the repackager's website, where they are shown more (originally free) games.