Threat Description

Worm: Android/Samsapo


Category: Malware
Type: Worm
Platform: Android
Aliases: Android/Samsapo.A


Worm:Android/Samsapo sends an SMS message to all the contacts listed in the device. The message contains a link which on clicking takes the user to a malicious APK package.


F-Secure's Mobile Security product blocks installation of this program with default settings.

Technical Details

Worm:Android/Samsapo.A appears to be a system utility program. On installation however, it performs multiple malicious routines, including downloading additional malicious files onto the device, harvesting and sending details from the device to a remote server and registering the phone number to a premium-rate service.

In behavior reminiscent of PC-based worms, Samsapo also distributes a link to a malicious file in an SMS message sent to all listed contacts.

Samsapo appears to be targeted to Russian Android users.

For more details, see:


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More