[Information] Malicious Android app for multiple countries

1. Introduction

Few days ago, a premium server SMS application for European users was big issue. The main reason of being attracted attention of that application was its range of infection. Recently, another variant of that has been reported.
In this trend, great number of malicious applications will cover all over the world.
INCA Internet Emergency Response Team can detect this and its variants and is updating.

The damage case hasn't been reported in South Korea; however, we need to be careful on using this sort of applications.

[Information] Android malicious application in Europe


2. Spreading path and symptoms of infection

Using official Android market is the difference of former malicious applications. Of Course it can be downloaded from black market and 3rd party market. Earlier malicious application targeted 8 countries. But this is targeting 18 countries.

*Target countries (Total 18 countries)

- Azerbaijan
- Armenia
- England
- Belarus
- Germany
- Georgia
- Israel
- Kazakhstan
- Kyrgyzstan
- Latvia
- Lithuania
- Russia
- Poland
- Tajikistan
- Ukraine
- France
- Czech Republic
- Estonia

This malicious application is inserted by various applications(Total 27apps) including "Games", "Wall Papers".

Image by Symantec Blog

* List of malicious applications officially enlisted in Android Market.

Corazon LLC:
- Horoscope (horoscope.android)
- Horoscope (com.corazon.horoscope)

Corelly LLC:
- Horoscope (com.corelly.horoscope)

Ranzy LLC:
- Twilight (com.Twilight.wallpapers)
- Puss in Boots (com.Puss.Boots.wallpapers)
- Moneyball (com.Moneyball.wallpapers)

Astrolog LLC:
- Sim City Deluxe FREE (com.astrolog.sim.city.deluxe.free)
- Need for Speed Shift FREE (com.astrolog.need.forspeed.shift.free)
- Great Little War Game FREE (com.astrolog.great.little.war.game.free)

- Cut the Rope (com.Cut.the.Rope)
- Angry Birds (com.Angry.Birds)
- Assassins Creed (com.Assassins.Creed)
- Talking Tom Cat (com.Talking.Tom.Cat)
- NEED FOR SPEED Shift (com.nsf.Shift)
- Where is My Water? (com.swampy.Water)
- Great Little War Game (com.Great.little.War.Game)
- World of Goo (com.World.Goo)
- Shoot The Birds (com.Shoot.The.Birds)
- Riptide GP (com.Riptide.GP)
- Talking Larry the Bird (com.Talking.larry.Bird)
- Bag It! (com.Bag.It)
- Talking Larry the Bird (com.Talking.Larry.Bird)
- Angry Birds (com.Angry.Birds.free)

Allwing Concept:
- TETRIS (com.tetris.free)
- Pool Master Pro (com.Pool.Master.free)
- Reckless Racing (com.Reckless.Racing.free)
- Paradise Islad (com.Paradise.Island.free)

Because these malicious applications are disguised as a game or wall paper, general users can't detect it.
This malicious application works same as former premium service SMS malicious application. But it tries to download additional APK file and install as following URL(This link has been blocked.).

* APK file download URL


* Condition for download

When the country code of infected smartphone is not among 18 countries above.

Following figure is run screen.

This malicious application is trying to download and install additional APK file, then it scans country code of infected smartphone. If the code is existed among those 18 countries, it will send certain message to victim's phone and will remove reply from premium SMS service provider as following code.

3. How to prevent

To sum up, the biggest features of this malicious application are used Google's Android market, spreading targeting countries, and used various applications for its spreading. In case of this malicious application, it used social engineering technique for its concealment.
To use smartphone safely from security threats of these malicious applications, we recommend following tips "Smartphone security management tips" for general users.

Smartphone security management tips

1. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
2. Download the proven application by multiple users at all times.
3. Use mobile anti-virus SW to check downloaded application before using it.
4. Do not visit suspicious or unknown site via smartphone.
5. Try not to see MMS, text, e-mail from uncertain user.
6. Set strong password on smartphone always.
7. Turn the wireless interfaces like Bluetooth only be used.
8. Do not save important information on phone.
9. Do not try illegal customizing like rooting or jailbreak.

INCA Internet (Security Response Center / Emergency Response Team) provides diagnosis/treatment function with “nProtect Mobile for Android” for mobile such as malicious file stated above and runs responding system against various security threats.

Diagnosis name

- Trojan-SMS/Android.EUsendSMS.A
- Trojan-SMS/Android.EUsendSMS.B


  1. I should say that this is a great article.

    As an Android user I very much appreciate a piece devoted to my chosen platform. The

    competition between iOS and Android should get very interesting in 2012, and I look

    forward to more insightful journalism like this!

    Android app developer

    1. Great Article Cloud Computing Projects

      Networking Projects

      Final Year Projects for CSE

      JavaScript Training in Chennai

      JavaScript Training in Chennai

      The Angular Training covers a wide range of topics including Components, Angular Directives, Angular Services, Pipes, security fundamentals, Routing, and Angular programmability. The new Angular TRaining will lay the foundation you need to specialise in Single Page Application developer. Angular Training

  2. Thank you because you have been willing to share information with us. we will always appreciate all you have done here because I know you are very concerned with our. GroupMe Online

  3. I concur with your idea. Helpful data shared. I am exceptionally upbeat to peruse this article. Much obliged for giving us pleasant data. Fabulous stroll through. I value this post. Latest APK File

  4. NCA android app is good because you can have other things Techfileoria

  5. If you want to get useful writing information, just read https://eduessayhelper.org/blog/thematic-essay-writing. It was really helpful when I had to write my thematic essay.

  6. Amazing Article ! I have bookmarked this article page as i received good information from this. All the best for the upcoming articles. I will be waiting for your new articles. Thank You ! Kindly Visit Us @ Coimbatore Travels | Ooty Travels | Coimbatore Airport Taxi

  7. We provide a list for top asked PHP interview questions and answers to help you get success in your interview. Find out PHP technical interview question & answers for fresher’s and professionals.

  8. Great post with a great piece of information. This will be really helpful for my reference. Thanks for sharing.
    WordPress Training in Chennai
    WordPress Training Chennai

  9. Thanks for sharing, nice post! Post really provice useful information!

    Giaonhan247 chuyên dịch vụ ship hàng mỹ về việt nam với sản phẩm là đồng hồ amazon thông qua dich vu ship hang my với chi tiết bảng giá ship hàng từ mỹ về việt nam và dịch vụ mua hàng pandora úc uy tín.

  10. This comment has been removed by the author.

  11. Information from this blog is very useful for me, am very happy to read this blog Kindly visit us @ Luxury Watch Box | Shoe Box Manufacturer |  Candle Packaging Boxes

  12. Hey Nice Blog!! Thanks For Sharing!!!Wonderful blog & good post.Its really helpful for me, waiting for a more new post. Keep Blogging!
    SEO company in coimbatore
    SEO company
    web design company in coimbatore

  13. Interesting information and attractive.This blog is really rocking... Yes, the post is very interesting and I really like it.I never seen articles like this. I meant it's so knowledgeable, informative, and good looking site. I appreciate your hard work. Good job.
    Kindly visit us @
    Sathya Online Shopping
    Online AC Price | Air Conditioner Online | AC Offers Online | AC Online Shopping
    Inverter AC | Best Inverter AC | Inverter Split AC
    Buy Split AC Online | Best Split AC | Split AC Online
    LED TV Sale | Buy LED TV Online | Smart LED TV | LED TV Price
    Laptop Price | Laptops for Sale | Buy Laptop | Buy Laptop Online
    Full HD TV Price | LED HD TV Price
    Buy Ultra HD TV | Buy Ultra HD TV Online
    Buy Mobile Online | Buy Smartphone Online in India

  14. VShare is a standout amongst the best-changed application stores for Android and iOS that give free APK records. VShare Installer encourages you to get increasingly premium Android includes by downloading broke, Mod Apps at no expense.

    Vshare ios

  15. AppVN is an outsider application store for Android. Dissimilar to Google Play, this application store furnishes you with someone of a kind highlights, for example, the office to download certain official premium applications for nothing.
    Appvn Apk

  16. The article is very interesting and very understood to be read, may be useful for the people. I wanted to thank you for this great read!! I definitely enjoyed every little bit of it. I have to bookmarked to check out new stuff on your post. Thanks for sharing the information keep updating, looking forward for more posts..
    Kindly visit us @
    Madurai Travels
    Best Travels in Madurai
    Cabs in Madurai
    Tours and Travels in Madurai

  17. Excellent Blog. I really want to admire the quality of this post. I like the way of your presentation of ideas, views and valuable content. No doubt you are doing great work. I’ll be waiting for your next post. Thanks .Keep it up!
    Kindly visit us @
    Luxury Packaging Box
    Wallet Box
    Perfume Box Manufacturer
    Candle Packaging Boxes
    Luxury Leather Box
    Luxury Clothes Box
    Luxury Cosmetics Box
    Shoe Box Manufacturer
    Luxury Watch Box

  18. I find that security holes are really dangerous. That may cause the user information to be stolen

  19. You are sure to get the best quality Write My Research Paper Online Services in the shortest period when you get professional help from our fast college Write My Research Paper Online.

  20. Awesome post. I am a normal visitor of your blog and appreciate you taking the time to maintain the excellent site. I’ll be a frequent visitor for a long time.

    ACP Sheet
    ACP Sheet Price
    Aluminium Composite Panel
    ACP Panel
    ACP Sheets

  21. Considering the vast number of companies offering Nursing Writing Services in the market today, we stand out as the best writing company offering Cheap Dissertation Writing Services.

  22. This comment has been removed by the author.

  23. Such A nice post... thanks For Sharing !!Great information for new guy like showbox for android

  24. Such A nice post... thanks For Sharing !!Great information for new guy like antimalware service executable

  25. thanks for the post were very helpful.have a great start and better future...
    qr code generator

  26. Good job! Fruitful article. I like this very much. It is very useful for my research. It shows your interest in this topic very well. I hope you will post some more information about the software. Please keep sharing!!
    SEO Training in Bangalore
    SEO Course in Bangalore
    SEO Training Institute in Bangalore
    Best SEO Training Institute in Bangalore
    SEO Training Bangalore


  27. Revive the lost empire of sim ancients and become a hero in city-building games. Build your city in Percity, as you grow it, keep your cityville citizens happy by producing the products they need!

    PerCity is a city-building game and farming game for every day to simulate your virtual farm on an adventure journey.

  28. Iinstazood is a best Instagram bot than Instazood, get free Instagram followers, Real instagram followers, Instagram auto likes, auto Instagram comments, publish instagram posts.

  29. Thanks for sharing it, I feel very happy to be able to play y8 game

  30. We discovered malicious apps on Google Play that can access remote

    run 3 game

  31. It's very good post which I really enjoyed reading. It is not everyday that I have the possibility to see something like this.
    download android apk

  32. If you are looking to buy Instagram followers cheap,buy Instagram followers, likes and views there is no better place than instaHotStar. We offer exclusive Instagram Power likes, followers, views for a price as low as $0.89

  33. Legitimate custom nursing writing services are not hard to come across for those in need of Affordable Nursing Writing Services and nursing research writing services.