Trojan:AndroidOS/BoxerSms.A

Trojan:AndroidOS/BoxerSMS.A is a trojan that affects mobile devices running the Android operating system. It prompts the user to send an SMS to a premium number in order to gain access to applications using the Android operating system. These applications may already be available on the Google Play store for no cost.

Installation

On installation, it may display the following information:

Payload

Prompts the user to send an SMS message

When run, Trojan:AndroidOS/BoxerSMS.A displays messages similar to the following:

These messages prompt the user to send an SMS message to a premium number at their expense to gain access to the download link for the application they want to install on the mobile device. These applications may already be available on the Google Play store for no cost.

In the wild, we have observed the trojan being used to install the following applications:

• Megastunt Mayhem Pro
• Better Keyboard
• Videocam Illusion Pro 1
• Motorola Droid Wall 2.3.4
• Guerrilla Bobv1.3
• Hot Donut
• Dream Book Sonnik 1.03
• Asphalt 5
• Rainbow Six
• Angrybirds Seasons v2.0.0
• Flying Android Live Wallpaper
• Puddle Drops
• Monopoly HD

Analysis by Marianne Mallen