Malware on Android? Big deal!
Summary: A Cisco Talos researcher dissected an Android Trojan (MD5: fdb84ff8125b3790011b83cc85adce16) packaged as an .apk called MoviePlayer, which on first run checked a SQLite database for a prior execution and then sent three SMS messages reading "798657" to short codes 3353, 3354 and 3353. The app targeted Russian-speaking users, was not distributed through the Android Market, and the researcher noted short-number SMS costs ranging from 1.2 to 300 rubles (about USD 0.03 to USD 9.8).
Key Takeaway: The payload was three premium-rate SMS messages sent silently on first launch, and Google's developer distribution agreement states Google does not undertake to monitor Products or their content, so a listing's name and description guarantee nothing about behavior.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026