Mobile security firm Lookout on 10th Aug warned that a booby-trapped "Movie Player application" was infecting Android phones in Russia with a virus that sends costly text messages.
Russia-based Kaspersky Lab also discovered the malicious "Trojan" code hidden in this "media player application" that users are downloading to their Android smartphones.
How this Trojan works is that it uses the infected system to begin sending SMSs to premium rate numbers without the owner's knowledge or consent, resulting in money passing from users' accounts to that of the cybercriminals
The Trojan has apparently only affected Android handsets in Russia but sporadic cases have been reported in the US and Europe.
Before you panic, this "Media Player" program does ask users to authorize "services that cost you money" prior to installation. Looking at the positive side, this just re-emphasizes the need for users to protect themselves by seriously reviewing the type of permissions that an app will be using before allowing them.
As such, it is not a surprise that a Google spokesman has this to say regarding this Trojan.
"Our application permissions model protects against this type of threat. When installing an application, users see a screen that explains clearly what information and system resources the application has permission to access, such as a user's phone number or sending an SMS. Users must explicitly approve this access in order to continue with the installation, and they may uninstall applications at any time. We consistently advise users to only install apps they trust. In particular, users should exercise caution when installing applications outside of Android Market."
A timely reminder on how vulnerable we are to malicious attacks and how we should not take security for granted, even when we are on our mobile phones. Do exercise caution when installing 3rd party applications!
