Trojan:Android/Tetus monitors incoming SMS messages and forwards the message contents to a remote server.
Tetus.A is an information stealing trojan disguised as an entertainment or social networking application, or a helper tool. It is distributed via a third-party Android app market, and may use the following package file names:
Tetus.A spies on incoming SMS messages. Once an event handler is successfully set, it will notify one of these command and control (C&C) servers:
Whenever a new SMS message arrives, Tetus.A will turn the content into one long string (replacing spaces with ‘_’) and forward it to the C&C server. The server recognizes different infected devices by the International Mobile Equipment Identity (IMEI) number.
Date Created: -
Date Last Modified: -