Trojan:Android/Kmin variants display a message as a decoy, while silently performing multiple malicious routines, including sending SMS messages to a premium-rate number and downloading and installing an additional application onto the device.
Upon execution, variants in the Kmin trojan family display a message asking the user for a permission to proceed with a specified action; the A variant asks whether the user wishes to install a paid app and subscribe to a service, while the B and C variants only enquire whether the user would like to install a paid application.
Regardless of whether the user accepts or declines, the app will proceed with the following actions:
This malware is discussed in further detail in: Q1 2012 Mobile Threat Report (PDF).
Date Created: -
Date Last Modified: -