South Korean Users Warned About SMS Trojan Disguised as Coffee Shop Coupon App

McAfee experts have analyzed this piece of malware

  SMS Trojan disguised as popular coffee shop coupon app
Mobile malware has become a problem all over the world and South Korea is no exception. Security experts from McAfee have identified a SMS Trojan that’s being distributed by cybercriminals as a version of a popular coffee shop coupon application for Android.

Mobile malware has become a problem all over the world and South Korea is no exception. Security experts from McAfee have identified a SMS Trojan that’s being distributed by cybercriminals as a version of a popular coffee shop coupon application for Android.

When victims launch the application, they’re presented with an error message which informs them that the server is overloaded and that their request cannot be processed.

In the meantime, the app, designed to target only South Korean users, creates a service that starts running in the background once the device is rebooted.

This particular service is designed to send the victim’s phone number to a remote server. After this is done, the malware, identified by McAfee as Android/Smsilence.A, monitors all incoming SMS messages and sends them back to the attacker.

The SMSs received by the victim, along with the message notifications, are blocked so that only the attacker sees them.

Comments