/>
X

New variants of premium rate SMS trojan 'RuFraud' detected in the wild

Researchers from AegisLab, have intercepted several new variants of the infamous RuFraud premium rate SMS trojan.
Written by Dancho Danchev, Contributor on

Researchers from AegisLab, have intercepted several new variants of the infamous RuFraud premium rate SMS trojan.

How the infection takes place:

In order to earn money from the premium-rate SMS, the trojan will fake itself as a famous app, like Angry Birds; or downloader/installer of well-known softwares, it looks like 'real thing'. Some of these kinds of apps appear on the third-party download sites, and some will repackage itself, post to the official Android Marketplace, and try to lure innocent people to install it.

The malicious attackers have bundled the premium rate SMS trojan into a fake copy of the popular app Angry Birds. Upon execution, the trojan seems permissions to sent SMS messages. Once the user confirms that the application is free to do so, the trojan will start sending premium rate SMS messages to multiple numbers outlined in AegisLab's post.

Related

This is the ultimate security key. Here's why you need one
Yubikey 5C NFC

This is the ultimate security key. Here's why you need one

Security
He flew American Airlines, she flew United. For both, the unthinkable happened
screen-shot-2022-06-30-at-10-14-36-am.png

He flew American Airlines, she flew United. For both, the unthinkable happened

Business
CERN is firing up its Large Hadron Collider at record energy levels, in search of dark matter
cern-photo-202011-145-2.jpg

CERN is firing up its Large Hadron Collider at record energy levels, in search of dark matter

Innovation