X

Sign in

Sign in to confirm

Have you forgotten your password?

... or login with Facebook:

Don't have an AndroidPIT account yet? Sign up

Malware Alert: MMarketPay Trojan Buys Paid Apps Without Permission

Eric McBride
4

 

I’m certainly not a fan of fear mongering, but when a threat comes along that’s specifically designed to take your hard earned money without you knowing it, I feel its worth the heads up. Unfortunately, that’s exactly what a new Android Trojan called MMarketPay does, and it has already reportedly left over 100,000 users out of pocket and very angry.

TrustGo security firm has reported that the Trojan has already spread to 9 app stores, and can be found in multiple applications that appear to be legit. Weather apps, travel apps, and streaming media apps have already been effected, and so far over 100,000 users have been plagued with the rogue code.

The way the trojan works is actually a bit scary. Once downloaded onto your device, it secretly buys apps from China’s Mobile Market WITHOUT informing the user. The trojan is apparently able to intercept China Mobile’s verification SMS without the user ever seeing it, and then posts the code to the Mobile Market to complete the transaction. Even if a CAPTCHA is required, the trojan even goes as far as to send the image to a remote server for analyses. So far, the app stores affected are all in China.

To keep from being affected by this malware, experts state that users should only purchase apps from trusted app stores, but even if you do, we all know that there is still no guarantee that you’ll never see malware on your device. 

Be safe out there guys, and always be careful before you press that download button. 

Picture credits: android-tipstricks.blogspot.de

Comments

Write new comment:
  • Brian Ashton Jul 9, 2012 Link

    thanks for that.

    0
    0
  • Eric McBride Jul 9, 2012 Link

    No problem :)

    0
    0
  • Sean Foster Jul 9, 2012 Link

    Two thumbs up, potentially a nasty one.
    So far I only use Google play and android pit, so I feel "reasonably" safe.

    0
    0
  • Eric McBride Jul 9, 2012 Link

    Same here Sean. I do my best to read up on apps before I download them, even if its just for a sec, as it seems you cant just download what you want anymore.

    Its a jungle out there!

    0
    0

Author
7

What will Android 5.0 be named?