Funtasy Trojan Targets Spanish Android Users with Sneaky SMS Charges
Summary: Palo Alto Networks WildFire detected a new Android Trojan family, Funtasy, on May 7, 2014, after a customer downloaded a fake TV remote control app from Google Play; the app requests full SMS access and, on opening, silently registers the phone with a premium SMS service at 1.46 euros per message, up to 10 messages a week. Unit 42 found 18 apps in Google Play containing the Trojan across publishers 'fun app', 'MilApps101' and 'Milapps102', and the malware intercepts the PIN confirmation SMS, blocks incoming service messages, and backdates their timestamps by 15 days to hide them.
Bottom line: The attacker could generate up to 30 euros per month across more than 67,000 infected phones - roughly 2 million euros a month - and traditional antivirus did not detect the threat at the time.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026