Threat Description

Worm:Android/Samsapo

Details

Aliases: Android/Samsapo.A
Category: Malware
Type: Worm
Platform: Android

Summary



Worm:Android/Samsapo sends an SMS message to all the contacts listed in the device. The message contains a link which on clicking takes the user to a malicious APK package.



Removal



F-Secure's Mobile Security product blocks installation of this program with default settings.



Technical Details



Worm:Android/Samsapo.A appears to be a system utility program. On installation however, it performs multiple malicious routines, including downloading additional malicious files onto the device, harvesting and sending details from the device to a remote server and registering the phone number to a premium-rate service.

In behavior reminiscent of PC-based worms, Samsapo also distributes a link to a malicious file in an SMS message sent to all listed contacts.

Samsapo appears to be targeted to Russian Android users.

For more details, see:






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Scan & clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free

Learn More