Worm:Android/Samsapo

Threat description

Details

CATEGORYMalware
TYPEWorm
PLATFORMAndroid

Summary

Worm:Android/Samsapo sends an SMS message to all the contacts listed in the device. The message contains a link which on clicking takes the user to a malicious APK package.

Removal

Automatic action

When detected during scanning, F-Secure SAFE will prompt you for a desired action. You may assess the detected file and choose to Uninstall, Quarantine or keep it installed on your device. More information about these options can be found at Help Center: Assess files detected during scanning.

Technical Details

Worm:Android/Samsapo.A appears to be a system utility program. On installation however, it performs multiple malicious routines, including downloading additional malicious files onto the device, harvesting and sending details from the device to a remote server and registering the phone number to a premium-rate service.

In behavior reminiscent of PC-based worms, Samsapo also distributes a link to a malicious file in an SMS message sent to all listed contacts.

Samsapo appears to be targeted to Russian Android users.

For more details, see:

Submit a Sample

Suspect a file or URL was wrongly detected? Send it to our Labs for further analysis

Submit a Sample

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

More Info