Trojan:Android/SmsSend

Threat description

Details

CATEGORYMalware
TYPETrojan

Summary

Trojan:Android/SmsSend is a malicious mobile application that reaps profit by silently sending SMS messages to premium-rate numbers.

Removal

Automatic action

When detected during scanning, F-Secure SAFE will prompt you for a desired action. You may assess the detected file and choose to Uninstall, Quarantine or keep it installed on your device. More information about these options can be found at Help Center: Assess files detected during scanning.

More

More information on the scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more assistance.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.

Technical Details

SmsSend.A is a version of another malware called OpFake. It reaps profit by sending the message "gf bigfun 281 fnuXW9Ey5" to these numbers: 9993, 9994, and 9995.

SmsSend.C operates in the same way SmsSend.A does, but uses a different display image, message content and recipient numbers. When executed, it displays images of nude women and sends out the message .galve 328 SjhFaG1IK. to the following numbers: 6008, 6006, 6152, and 6952.

Other SmSSend variants follow the same behavior, but use different display images, message contents and recipient numbers.

Screenshot of SmsSend.A in action

Submit a Sample

Suspect a file or URL was wrongly detected? Send it to our Labs for further analysis

Submit a Sample

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

More Info