Home / malware

PDF

Worm:Android/Samsapo

First posted on 15 May 2014.
Source: F-Secure

Aliases :

Worm:Android/Samsapo is also known as Android/Samsapo.A.

Explanation :

Worm:Android/Samsapo sends an SMS message to all the contacts listed in the device. The message contains a link which on clicking takes the user to a malicious APK package.

Technical Details
Worm:Android/Samsapo.A appears to be a system utility program. On installation however, it performs multiple malicious routines, including downloading additional malicious files onto the device, harvesting and sending details from the device to a remote server and registering the phone number to a premium-rate service.

In behavior reminiscent of PC-based worms, Samsapo also distributes a link to a malicious file in an SMS message sent to all listed contacts.

Samsapo appears to be targeted to Russian Android users.

For more details, see:

Welivesecurity: Android malware worm catches unwary users

Last update 15 May 2014

 

TOP