A sophisticated mobile malware designed to empty your bank account

Jan 12, 2012 14:19 GMT  ·  By

Malicious Android apps are not uncommon, but Trend Micro researchers stumbled upon a new version of an older fraudulent app that uses a series of tricks to convince the victim into paying a certain amount of money.

These ill-intended Game Dunga sites usually host adult content, mainly videos, which, when viewed by the victims, trigger a pop-up that requests the user to download an app identified as Androidos.Faketimer.A.

Once installed and executed, the malicious app gathers sensitive information such as Gmail account data, SIM data and the affected device’s phone number, and sends it to the cybercriminals that run the scam.

Then comes the fun part. The application is programmed so that every five minutes it triggers a pop-up window that requests the victim to pay a certain amount of money and to make everything look more legitimate, it displays the information it had previously stolen from the phone.

Users are advised not to click on anything if they encounter such websites and they're recommended to install a mobile antivirus solution to protect them from malevolent elements.