Trojan:Android/SmsSend

Threat description

Details

Category: Malware
Type: Trojan
Platform: Android
Aliases: Trojan:Android/SmsSend, Android.trojan.smssend

Summary


Trojan:Android/SmsSend is a malicious mobile application that reaps profit by silently sending SMS messages to premium-rate numbers.



Removal


Automatic action

F-Secure SAFE automatically blocks installation of this program.

More

More information on scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more assistance.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.



Technical Details


SmsSend.A is a version of another malware called OpFake. It reaps profit by sending the message "gf bigfun 281 fnuXW9Ey5" to these numbers: 9993, 9994, and 9995.

SmsSend.C operates in the same way SmsSend.A does, but uses a different display image, message content and recipient numbers. When executed, it displays images of nude women and sends out the message .galve 328 SjhFaG1IK. to the following numbers: 6008, 6006, 6152, and 6952.

Other SmSSend variants follow the same behavior, but use different display images, message contents and recipient numbers.

Screenshot of SmsSend.A in action




SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Protect your life on every device

F-Secure SAFE looks out for you and the people close to you, on every device, all the time.

Learn More