Researchers of the Russian Division of Kaspersky Lab have christened it as Trojan-SMS.AndroidOS.FakePlayer.a, malware, that once insidiatosi in Android OS, send sms to a number of Russian charge, probably due to malware creators.
The Trojan hides in an application for playback of video file called “Movie Player“, for now widespread in Russia only and not available Android Market.
Beginning of the installation you are notified that you are going to approve the sending of SMS, which is obviously not approval should be given, thus interrupting the installation of the APA.
Once the application, the malware monitors the SQLite database to write within a string (which will be used only for the first run), then every time you start the app you just installed, start a text message to any number Russian payment (the cost looks to several dollars).
When sending fraudulent sms, the app will show a waiting message such as “expect, access to video library in progress“, not doing so noted that the operation is doing in the meantime.
Jon Oberheimer, founder of Scio Security has done some tests and issued a thorough analysis of the Trojan
Although this malware is contained for now in Russia and still keeps a low profile at the level of risk to the user, Google’s advice is to install only certain applications that have been discharged at the origin and safe.