In this trend, great number of malicious applications will cover all over the world.
INCA Internet Emergency Response Team can detect this and its variants and is updating.
The damage case hasn't been reported in South Korea; however, we need to be careful on using this sort of applications.
2. Spreading path and symptoms of infection
Using official Android market is the difference of former malicious applications. Of Course it can be downloaded from black market and 3rd party market. Earlier malicious application targeted 8 countries. But this is targeting 18 countries.
This malicious application is inserted by various applications(Total 27apps) including "Games", "Wall Papers".
Image by Symantec Blog
Because these malicious applications are disguised as a game or wall paper, general users can't detect it.
This malicious application works same as former premium service SMS malicious application. But it tries to download additional APK file and install as following URL(This link has been blocked.).
Following figure is run screen.
This malicious application is trying to download and install additional APK file, then it scans country code of infected smartphone. If the code is existed among those 18 countries, it will send certain message to victim's phone and will remove reply from premium SMS service provider as following code.
3. How to prevent
To sum up, the biggest features of this malicious application are used Google's Android market, spreading targeting countries, and used various applications for its spreading. In case of this malicious application, it used social engineering technique for its concealment.
To use smartphone safely from security threats of these malicious applications, we recommend following tips "Smartphone security management tips" for general users.
INCA Internet (Security Response Center / Emergency Response Team) provides diagnosis/treatment function with “nProtect Mobile for Android” for mobile such as malicious file stated above and runs responding system against various security threats.