Linked by Thom Holwerda on Wed 11th Aug 2010 21:00 UTC, submitted by namakemono
PDAs, Cellphones, Wireless Kaspersky has announced in this article the first trojan specific for Android. "The new malicious program penetrates smartphones running Android in the guise of a harmless media player application. Users are prompted to install a file of just over 13 KB with the standard Android extension .APK. Once installed on the phone, the Trojan uses the system to begin sending SMSs to premium rate numbers without the owner’s knowledge or consent, resulting in money passing from a user’s account to that of the cybercriminals."
Thread beginning with comment 436455
To read all comments associated with this story, please click here.
This isn't just an Android issue
by HackDefendr on Thu 12th Aug 2010 19:15 UTC
HackDefendr
Member since:
2010-05-21

The transport/delivery application is the only thing new here. Android is not the only affected mobile OS. The actual trojan is the same OLD SMS trojan that has been around for years - (Trojan-SMS.J2ME.RedBrowser.a) http://www.securelist.com/en/descriptions/old113394

I really wish blogs would stop regurgitating this crap without doing at least a little journalism.

Again ..

Same old SMS trojan (circa 2006), New delivery system. The delivery caters to Android, because the application with the payload was written for Android.

But the Trojan and what it does is old news.

There! Was that so hard?

Reply Score: 1

HackDefendr Member since:
2010-05-21

Just to bring home my point ... there are a total of 561 named SMS sending trojans for mobile devices.

http://www.securelist.com/en/descriptions?behavior=trojan-sms

Everything from Symbian, to iPhone, to WinMo have been affected by these trojans...nothing new except that now Android is also a target.

Reply Parent Score: 1

namakemono Member since:
2009-07-01

As you said, the trojan itself may be old, but being now targetting Android, it IS an Android issue.

There are a lot of "new" viruses around that are variations of old ones. Seeing they moving from one platform to another is bad too.

And it was not from a blog, original story is from Kaspersky, an anti-virus maker.

Reply Parent Score: 1

HackDefendr Member since:
2010-05-21

I never said it originated from a Blog, I said blogs are merely regurgitating the same story without fact checking. Kaspersky's shit stinks too .. so don't go thinking for one minute they can't make a mistake.

The big mistake here is that .. this trojan is just the same old trojan re-wrapped 561 times with 561 different names. Each of these does the exact same thing ... sends premium SMS texts primarily using Russian SMS short codes. So if you are not on a Russian network there is little chance you will get charged the toll charges.

See a detailed and accurate analysis of this old trojan with a new name: http://jon.oberheide.org/blog/2010/08/10/dexcode-teardown-of-the-an...

Reply Parent Score: 1