Home / malware

PDF

Trojan:Android/Fakeinst.HB

First posted on 27 February 2014.
Source: F-Secure

Aliases :

Trojan:Android/Fakeinst.HB is also known as Fakeinst.HB.

Explanation :

Trojan:Android/Fakeinst.HB is a repackaged clone of a popular, free racing game. Unlike the original, the repackaged clone requires the user to pay a charge, supposedly to "access higher game levels".

Technical Details
The original game is a highly popular car racing game available, completely free, on the Google Play Store. Trojan:Android/Fakeinst.HB however includes a routine that demands payment to continue to play the game.

During game play, the trojan displays an alert message every ten minutes informing the user that they must pay, supposedly to gain access to the higher game levels. A varying scale of payments is listed (in Vietnamese dong).

The user is instructed to make payment either by scratch cards or by SMS. If the user opts to send an SMS, the app will send an SMS message to a given number.

If the user refuses to pay and ignores the repeated messages, after a period of time they are sent to the repackager's website, where they are shown more (originally free) games.

Last update 27 February 2014

 

TOP