Home / malware

PDF

Android.Milipnot

First posted on 05 July 2014.
Source: Symantec

Aliases :

There are no other names known for Android.Milipnot.

Explanation :

Android package file
The Trojan may arrive as a package with the following characteristics:

Package name: com.gmail.xpack
APKs: Raiffeisen.apk, ZKB.apk
Version: 1.0

Permissions
When the Trojan is being installed, it requests permissions to perform the following actions:
Start once the device has finished bootingSend SMS messagesRead SMS messages on the deviceMonitor incoming SMS messagesOpen network connectionsCheck the phone's current stateAccess location information, such as Cell-ID or WiFiAccess information about networks
Installation
Once installed, the application will display an icon that poses as the logo of a legitimate banking app.







Functionality
When the Trojan is executed, it poses as a legitimate banking app.


The Trojan may then steal banking two-factor authentication details that the device receives through SMS messages.

Last update 05 July 2014

 

TOP