Threat behavior
Trojan:AndroidOS/Fakeplayer.A is a trojan that affects mobile devices running the Android operating system; it sends a certain SMS message to specific numbers, which may result in the user being charged for the transaction without his or her consent.
Trojan:AndroidOS/Fakeplayer.AÂ may be downloaded as a standard .APK installer for mobile devices running the Android platform. It poses as a legitimate media player application using the following icon:
Â
Â
When installed, it may display the following program information:
Â
Â
Once installed, the user sees the following:
Â
Â
On installation, it prompts the user to allow it to send SMS messages.
Â
When viewed on a phone running the Android operating system, this malicious application may appear as the following:
Â
Â
It displays a message in Russian and then sends SMS messages without the user's consent. The SMS it sends contains the string "798657" to the following Russian premium SMS short code numbers, which may charge the user without his or her knowledge:
Â
Â
Analysis by Marianne Mallen
Prevention