Worm-like Android malware spreads via text messages
Samsapo uses a worm-like characteristic to spread to other Android devices
IDG News Service - A piece of malware targeting Russian-speaking Android users abuses a person's contact list to try and infect other devices, according to security vendor Eset.
The malware, call "Android/Samsapo.A" can download other malicious files to a phone, steal personal information from a device such as text messages and block phone calls, wrote Robert Lipovsky, an Eset malware researcher. The malware uploads data to a domain that was registered about a week ago.
Samsapo spreads by sending text messages from an infected device to other people in the victim's contact list, a worm-like characteristic that has been used by other mobile malware programs.
The text message says "Is this your photo?" in Russian and has a link to an AndroidA application package (.APK)A file containing a copy of Samsapo.
"This technique wouldnt raise an eyebrow on Windows, but is rather novel on Android," Lipovsky wrote.
The APK file name makes it appear as a system utility: "com.android.tools.system v1.0." The program doesn't have a graphical user interface nor an icon in the application drawer, Lipovsky wrote.
Android will warn users when downloading applications from unknown sources. Google scans its Play store for malicious applications, which reduces the chance a user will download a malicious one.
Security experts generally recommend not downloading Android applications from third-party websites, as even legitimate looking applications may have been maliciously modified. Also, applications that ask for permissions such as reading and writing text messages should be viewed with caution.
Send news tips and comments to email@example.com. Follow me on Twitter: @jeremy_kirk
- Comprehensive Advanced Threat Defense The hot topic in the information security industry these days is "Advanced Threat Defense" (ATD). This paper describes a comprehensive, network-based approach to...
- Advanced Threat Defense: A Comprehensive Approach In this interview, Peter George, president, General Dynamics Fidelis Cybersecurity Solutions, explains why we need more than anti-malware, and what constitutes a comprehensive...
- Who's Spying on You? You're aware of the threats of malware to your business but what about the ever-changing ground rules? Cybercriminals today are launching attacks against...
- Enable secure remote access to 3D data without sacrificing visual perfomance Design and manufacturing companies must adapt quickly to the demands of an increasingly global and competitive economy. To speed time to market for...
- What should I look for in a Next Generation Firewall? SANS Provides Guidance With so many vendors claiming to have a Next Generation Firewall (NGFW), it can be difficult to tell what makes each one different....
- Why Are Customers Really Deploying an NGFW? It seems every IT Security expert is talking about the NGFW, but what are people really doing? This webcast covers 5 real-world customer... All Malware and Vulnerabilities White Papers | Webcasts