Variants in the OpFake family send SMS messages to premium-rate numbers.
The OpFake malware family include variants that operate on the Android, Symbian and Windows Mobile platforms. All variants essentially sends SMS messages to premium-rate numbers.
The first variant, OpFake.A is disguised as an Opera Mini web browser updater, to the extent of adding an Opera icon on the menu and displaying a fake download progress bar to make it appear that the application is actually downloading, and a fake license.
In addition to sending out SMS messages to premium-rate numbers, the malware also monitors SMS messages and is capable of deleting/moving messages based on the originating phone numbers and message content. Subsequent variants share similar technical details.
This malware is also discussed in the following Labs Weblog post:
This malware is discussed in further detail in:
Date Created: -
Date Last Modified: -