Trojan:Android/Kituri sends SMS messages to a list of premium-rate numbers retrieved from a remote location.
Upon execution, Trojan:Android/Kituri sends the device.s International Mobile Equipment Identity (IMEI) number to a remote server, then connects to a remote location to obtain a list of premium-rate numbers. The app subsequently sends SMS messages to these numbers.
To distract the user from any indications of these activities taking place, Kituri.A displays a 'User Agreement' for the user's attention.
This malware is discussed in: Q1 2012 Mobile Threat Report (PDF).
Date Created: -
Date Last Modified: -