Trojan:Android/Gepew

Threat description

Details

CATEGORYMalware
TYPETrojan
PLATFORMAndroid

Summary

Trojan:Android/Gepew is installed on a mobile device as part of a PC-based malware's payload and attempts to replace installed apps with trojanized versions.

Removal

Automatic action

When detected during scanning, F-Secure SAFE will prompt you for a desired action. You may assess the detected file and choose to Uninstall, Quarantine or keep it installed on your device. More information about these options can be found at Help Center: Assess files detected during scanning.

Technical Details

Trojan:Android/Gepew variants are reportedly installed on a mobile device as part of the payload of a PC-based trojan, Droidpak. When this trojan infects a Windows system, it downloads a mobile app onto the machine and then attempts to install it onto any Android devices connected to the system by a USB cable. For installation to be successful, the device must have the setting 'Enable USB debugging' enabled.

When installed, Gepew will scan the device for installed apps associated with South Korean banks. If found, Gepew prompts the user to remove these apps; if complied with, trojanized versions of these apps are installed. The trojan may also monitor and intercept incoming SMS messages, which are forwarded to a remote server. For more information, see:

Submit a Sample

Suspect a file or URL was wrongly detected? Send it to our Labs for further analysis

Submit a Sample

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

More Info