Worm:Android/Samsapo sends an SMS message to all the contacts listed in the device. The message contains a link which on clicking takes the user to a malicious APK package.
F-Secure SAFE automatically blocks installation of this program.
Worm:Android/Samsapo.A appears to be a system utility program. On installation however, it performs multiple malicious routines, including downloading additional malicious files onto the device, harvesting and sending details from the device to a remote server and registering the phone number to a premium-rate service.
In behavior reminiscent of PC-based worms, Samsapo also distributes a link to a malicious file in an SMS message sent to all listed contacts.
Samsapo appears to be targeted to Russian Android users.
For more details, see: