Android SMS Spambot Update – SpamSoldier

Tue, Dec 18, 2012 by Andrew Conway

Yesterday we told you about an Android trojan used to send SMS spam. Currently, the versions of this malware being distributed by the spammer are:

  • angrybirds.apk MD5 = a0e7a47c6b3582f9c9a4c5166eb0eace
  • gtavicecity.apk MD5 = a8de900d9ff269455f4344b8e8409699
  • needforspeed.apk MD5  = c18bc53d74e8a6926453a8c86355501a

The Command and Control server has moved to pinktrash.mobi, though imperialistic.mobi is still functional for the handsets infected with the older versions of the trojan.

Lookout Mobile Security have published an interesting blog post on this attack, which they call SpamSoldier. They discuss the techniques used to escape detection. Firstly the app attempts to remove its icon, so that you will not be aware that it is even there. It also attempts to block incoming messages unless they are from someone on your contacts list. This prevents the people your phone is spamming from complaining to you about the spam they received.

So, if you do get SMS spam, don’t bother replying  STOP to the sender, just forward that message to 7726 (that’s S-P-A-M on your keypad). Replying STOP will only work for commercial contacts from legitimate companies.

We’re continuing to monitor this attack, so watch the blog, or add it to your RSS feed, if you want to keep up to date.

 

 

 

 

4 Responses to “Android SMS Spambot Update – SpamSoldier”

  1. Freebie tricksters unleash spam botnet using Android phones | Games and Me Says:

    [...] More information: blog.cloudmark.com/2012/12/18/android-sms-spambot-update/ [...]

  2. Android-Based Bot Network Uncovered - Computing Now | Newsfeed - IEEECS Says:

    [...] Infected users could see lower communications speeds and significantly higher bills. (PhysOrg)(Cloudmark) Blogtype podcast By CS Newsfeed 0 Comments Flag Please sign in to flag [...]

  3. Freebie tricksters unleash spam botnet using Android phones | Android News | Game Unlimitted | Game, New and updates Says:

    [...] More information: blog.cloudmark.com/2012/12/18/android-sms-spambot-update/ [...]

  4. Text Message Marketing News Roundup: December 17 – December 23 | SMS Marketing Blog Says:

    [...] Android SMS Spambot Update Lookout Mobile Security have published an interesting blog post on this attack, which they call SpamSoldier. They discuss the techniques used to escape detection. Firstly the app attempts to remove its icon, so that you will not be aware that it is even there. It also attempts to block incoming messages unless they are from someone on your contacts list. This prevents the people your phone is spamming from complaining to you about the spam they received. [...]

Leave a Reply
(will not be published)
Submit Your Comments

* Indicates a required field

Learn More About Cloudmark
Our Products
News and Events
Site Map  •  Privacy Policy  •  ©2002–2014 Cloudmark, Inc.