First Android Trojan goes Wild!
Mobile security firm Lookout recently warned that a booby-trapped “Movie Player applications programme” was infecting Android smartphones in Russia with a virus that sends expensive text messages . Russia-based Kaspersky Lab also identified the malicious ” Trojan” code hidden in this “media player applications programme” that users are downloading to their Android smartphones.
How this virus works is that it uses the infected smartphone to begin sending out SMSs to premium rate numbers without the owner’s knowledge or consent, resulting in money passing from users’ accounts to that of the cybercriminals. The Trojan has apparently only affected Android handsets in Russia but sporadic cases have been reported in the US and Europe.
Before you panic, this “Media Player” programme does ask users to authorise “services that cost you money” prior to installation. Looking at the positive side, this just reemphasizes the need for users to protect themselves by seriously going over the type of permissions that an app will be using before allowing them.
As such, it is not a surprise that a Google spokesman has this to say regarding the first Android Trojan..
“Our application permissions framework protects against this type of threat. When installing an applications programme, users will see a screen that explains clearly what information and system resources the application has permission to access, such as a user’s number or sending out an SMS. Users must explicitly approve this access in order to continue with the installation, and they may uninstall applications programmes at any time. We consistently propose to users to only install apps they believe. In particular, users should exercise caution when installing applications outside of Android Market.”
A well timed reminder on how vulnerable we are to malicious attacks and how we should not take security for granted, even when we are on our mobile phones!