25 fake smartphone applications generate costly Premium rate SMS
PRAGUE, Czech Republic, May 14, 2012 Researchers at the AVAST antivirus labs in Prague have discovered a new batch of fake alternative marketplaces for downloading smartphone apps that trick users into sending premium rate SMS messages. Using a variant of the Android:FakeInst family, the new marketplaces hosted at www.t2file.net, www.uons.net, www.uote.net and www.sofile.net are aimed at defrauding users looking for smartphone screen savers and games.
“All of these sites were registered just a week ago, so it looks like they were supposed to serve only as a malware platform,” explains Ondrej Vlcek, CTO of AVAST Software, “Accessing these URL’s via a browser generates an error message but using a smartphone prompts the user to install a downloader with a huge range of permissions including the ability to trigger premium rate SMS messages.”
Although the sites target Russian speakers, the fake downloader generates premium rate SMS based on the users country and contains numbers for 60 different countries in an AES encrypted XML file distributed with the application.
Whether the premium rate SMS service providers are complicit in this attempt to defraud smartphone customers is hard to gauge. However, Mr. Vlcek believes that Avast! is still the only anti-malware product to detect this new generation of premium SMS scamming applications.
Ondrej Vlcek warns, “Never trust weird looking alternative markets and always check the app permissions. If you’ve downloaded a game or screensaver that asks for SMS and Phone calls permissions, then you are likely to receive an unpleasant surprise in your next phone bill.“
For more information, please visit the avast blog at: https://blog.avast.com/
Avast (www.avast.com), the global leader in digital security products, protects over 400 million people online. Avast offers products under the Avast and AVG brands that protect people from threats on the internet and the evolving IoT threat landscape. The company’s threat detection network is among the most advanced in the world, using machine learning and artificial intelligence technologies to detect and stop threats in real time. Avast digital security products for Mobile, PC or Mac are top-ranked and certified by VB100, AV-Comparatives, AV-Test, OPSWAT, ICSA Labs, West Coast Labs and others. Avast is backed by leading global private equity firms CVC Capital Partners and Summit Partners.
1988-2017 Copyright Avast Software s.r.o.