Reversing Mobile Malware :: Android/SMSRep-B
- July 12th, 2011
- Write comment
- By Dhawal Desai,
Threat Name :: Android/SMSRep-B
Category :: Trojan and Spyware
Alias :: Trojan-Spy.AndroidOS.Smser.a
Introduction
Over the time security space has seen a number of versions and variants of banking malwares. With the increase in popularity and usage of smart phones, mobile attacks are becoming more frequent. Android platforms have been one of the most favorite targets of malware writers.
Zeus Banking Trojan has been out there for quiet a while. One of the methods that banks and other financial institution use to defeat Zeus is to use single-use authentication. Credentials with the authentication credentials delivered out-of-band via an SMS message to the registered user’s phone. The malware analyzed here works with Zeus to steal the user’s authentication credentials. It infects the user’s mobile phone, intercepts the SMS messages and sends them back to Zeus’s Command and Control Server.