Android.Positmob

Discovered: November 12, 2011
Updated: November 14, 2011 9:58:01 AM
Type: Trojan
Infection Length: 304, 483 Bytes

When the Trojan is being installed, it requests permissions to perform the following actions:

• Send SMS messages.
• Read SMS messages on the device.
• Open network connections.
• Initiate a phone call without using the Phone UI or requiring confirmation from the user.
• Monitor for WAP push messages.

Functionality
When the Trojan is executed, it checks the Mobile Country Code (MCC) of the mobile device to determine the country in which the device is operating.

The Trojan contains a list of MCC and premium rate numbers within its code. It chooses a suitable premium rate number to send SMS messages to depending on the country detected.

• Category: Security Alerts

• Download:
• • Threat Updates.pdf