Saturday, 26 July 2014

Dr. Web Trojan caught stealing SMS messages

Very unusual application failed to neutralize employees Doctor Web this week. Android-called Trojan Princer relatively neutral with respect to the stored user data - passwords, credit card and telephone numbers, but with a big appetite "eats" incoming SMS-message.

Malicious software for the Android mobile platform extends under the guise of an important security certificate, which supposedly should be installed on the mobile device. After installation Android.Pincer.2.origin begins to behave as befits any mobile virus: use the user's personal data, in particular, incoming SMS messages.
After rebooting the device mobile virus connects to the remote attacker's server and sends back all the user data. It is interesting that in addition to the usual SMS messages, it can also be data on the phone, for example, IMEI, serial number, the name of the operator and mobile phone number.
For a successful boot with OS Android, Pincer virus uses a system service CheckCommandServices, runs as a background service.
It is understood that incoming messages can actually contain sensitive information - for example, a message from the bank, any data and passwords, and links. etc. How many users had infect their Android-powered devices, is still unknown. Anyway, at least once a month will not be superfluous to scan your smartphone or tablet by some anti-virus application - even if the money does not disappear from the account, and the device is nothing strange happens.

No comments:

Post a Comment