Home Malware Programs Trojans Trojan:Java/SmsSy.A

Trojan:Java/SmsSy.A

Posted: April 25, 2012

Threat Metric

Threat Level: 9/10
Infected PCs: 66
First Seen: April 25, 2012
OS(es) Affected: Windows

Trojan:Java/SmsSy.A is an SMS-sending Trojan that targets mobile devices with Java midlet installed and spreads in Malaysia. Trojan:Java/SmsSy.A is covered as a content update from Samsung sent via an SMS message. The fake SMS message includes a malicious link, which, if clicked, redirects the recipient to another web-link (http://mmgbu[...].com:90/[...].jar) that takes to a JAR file. This JAR file contains the information for Trojan:Java/SmsSy.A to send SMS messages to numerous short numbers. Once executed, Trojan:Java/SmsSy.A would send three SMS messages, most probably to premium numbers, without the users' permission. Then, Trojan:Java/SmsSy.A will show some 'HOT WEB DL' and images of ladies which are grouped into five selections: DANCE CLUB, BEACH GIRLS, FUNNY VIDEO, GT MODEL, and HOT CAM. Once a victim selected the option, Trojan:Java/SmsSy.A would send out SMS messages that incorporate the string ?On (content)? to (number), where the contents/numbers could involve HB, MODEL, LY, AV, GA/ 33499, 33499, 36660, 36660, 36989.

Loading...