Home / malwarePDF  

Trojan:Java/SMSer.AI


First posted on 20 January 2012.
Source: Microsoft

Aliases :

Trojan:Java/SMSer.AI is also known as Trojan-SMS.J2ME.OpFake.hp (Kaspersky), Java.SMSSend.717 (Dr.Web), J2ME/TrojanSMS.Agent.BC trojan (ESET).

Explanation :

Trojan:Java/SMSer.AI is a trojan that affects mobile devices that support the Java Platform Micro Edition. It may entice users to download malicious applications disguised as games and other legitimate applications into the device.


Top

Trojan:Java/SMSer.AI is a trojan that affects mobile devices that support the Java Platform Micro Edition. It may entice users to download malicious applications disguised as games and other legitimate applications into the device.



Installation

Upon execution, Trojan:Java/SMSer.AI displays the following screen, which asks the user to confirm its installation:



A rough translation of the text is as follows:

Initialization
Confirm agreement with the rules of loading "Need for Speed Shift Symbian".
To continue the download, then click Next.

If the user selects "Next", an SMS is sent to a premium number without the user's knowledge.

Trojan:Java/SMSer.AI then displays the following screen:



Completed
Activation completed successfully. You will receive an SMS message with a link to "Need for Speed Shift Symbian".
If the message does not come, you can download "Need for Speed Shift Symbian" at http://t-<removed>.ru/<removed>, or click "Next" to automatically switch to boot.

Additional information

Trojan:Java/SMSer.AI may pose as any of the following applications:

  • Need for Speed Shift Symbian
  • Hot Girl
  • Farm Frenzy
  • Partner Locator
  • Split Second
  • iPiano
  • Fast and Furious 5




Analysis by Zarestel Ferrer

Last update 20 January 2012

 

TOP

Malware :

Family: