12345

9/04/2012

[Information] Chinese malicious application called SMS Zombie

1. Introduction

Malicious applications called SMS Zombie have been found in these days. With booming of malicious applications for smartphone, the rumor has that more than 500 thousands smartphone were infected by malicious application. Of course, this malicious app runs for Chinese android smartphone user, they haven't harm to Korean users so far. But the noticeable thing is that the spreading of malicious application for monetary exploitation has been started in overseas countries.



2. Spreading path and symptom of infection

This malicious application has been being spread on Chinese unofficial markets as following.


This malicious application performs sending SMS without permission, collecting information, and trying to install additional malicious application.

Installation screen is as following.


It doesn't show permissions for installation and "Open" button is deactivated. It means that malicious application is coded as wall paper type and additional permission for various functions is not manifest but dynamic registration process. Besides, the reason of deactivate of "Open" button is that it runs as a service.

Following image is some part of permission on AndroidManifest.xml.


Dropper-typed Host malicious application

Because this application registered nothing but wall paper service, to activate this program, user have to click following wall paper.


Upon executing wall paper, AlertDialog for installing additional application will be shown.


Left button is for confirm and right button is for cancel. If a user clicks confirm button, this application will try to install additional files from malicious file.


As you see, this file looked like image file, however; this file is APK file. Clicking "Confirm" button can install additional malicious application.

Analysis of additional malicious file working real malicious behaviors

Following figure is run screen of additional malicious file.


This also runs as a service, so "Open" button is deactivated. Following figure is some part of AndroidManifest.xml. We can see requiring permission code.


After installed, we can see that this malicious application has loaded as a service.


Besides, it shows administration activating screen for getting permission as following.


As it shows, there are 2 buttons both "Activate" and "Cancel", however; "Activate" button is only working. To click "Cancel" will show Activate device administrator window.


Finally, this malicious application will get permission for inducing to click "Activate" button. And then it will get various permissions including application removal.

※ Getting permission of device administrator

Usually malicious applications try to get administrator permission for obtaining its removal rights. After getting that permission, general uninstall procedure won't work.


※ How to remove

In case of this kind of application, both malicious and normal types are presence. To remove, following procedure will be needed.

"Settings" - "Location and security" - "Device administrators"


Click and choose "deactivate". Of course, clicking "deactivate" seemed nothing to be done. And then hold the home button - "task manager" - "exit all running program" - remove "this application" on program tap.

After installation, it will create "phone.xml" on certain path.


"phone.xml" will contain certain keyword by following code and encoded by Simplified Chinese.


Following figure shows real contents on phone.xml which can snatch bank account information and mobile transaction history. (by monitoring SMS.)


And then, this malicious application will send collected information to certain number(13093632006) as SMS secretly.


※ Details of SMS sending message

- 1.5V:Model(Model info:sdk);os(OS version info);Language(Using language);NET(Network usage info:3G/wifi)

In case of unable to use wifi, it will send SMS including certain message on following.


Except this case, this malicious application check rooting status of infected smartphone and sends SMS.


This application monitors SMS. AndroidManifest.xml doesn't contain code for getting permission but its internal code contains dynamic SMS monitoring receiver.


It seems that various security solutions may detect SMS monitoring receiver on AndroidManifest.xml.

Registered SMS related receiver monitors all SMS which were parsed and compared with keywords in "phone.xml". If string meets condition, it will send SMS to certain number.


Some of sent SMS will be removed with following code.


3. How to prevent

In case of this malicious application which contains 1st Dropper, if this Dropper is modified, various security threats can be existed. To use smartphone safely from security threats of these malicious applications, we recommend following tips "Smartphone security management tips" for general users.

Smartphone security management tips

1. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function.
2. Download the proven application by multiple users at all times.
3. Use mobile anti-virus SW to check downloaded application before using it.
4. Do not visit suspicious or unknown site via smartphone.
5. Try not to see MMS, text, e-mail from uncertain user.
6. Set strong password on smartphone always.
7. Turn the wireless interfaces like Bluetooth only be used.
8. Do not save important information on phone.
9. Do not try illegal customizing like rooting or jailbreak.

INCA Internet (Security Response Center / Emergency Response Team) provides diagnosis/treatment function with “nProtect Mobile for Android” for mobile such as malicious file stated above and runs responding system against various security threats.

Diagnosis name

- Trojan/Android.SMSZombie.A
- Trojan/Android.SMSZombie.B
- Trojan/Android.SMSZombie.C

41 comments:

  1. I enjoyed reading this post it helps me a little bit and gives me an idea on my business for sms. thanks for this!

    Mensaje movil gratis

    ReplyDelete
  2. Blogs are good for every one where we get lots of information for any topics nice job keep it up !!!

    ReplyDelete
  3. The best way to protect your expensive smartphone is by using a case.
    It not only protects your phone from damage due to accidental drop, but also imparts beauty to your phone.
    Here are some of the best and exclusive cases for you.
    You can check them out and select one for your phone.
    Galaxy S8 Kickstand Cases

    ReplyDelete
  4. Thanks for sharing, nice post! Post really provice useful information!

    Anthaison chuyên cung cấp sản phẩm cho giấc ngủ bé yêu ngủ ngon: http://bit.ly/2Athdgb, http://bit.ly/2BimWBI TS cho bé, máy đưa võng giá rẻ http://bit.ly/2DQFBJA, giá máy đưa võng https://bit.ly/2IZjxPT, võng điện https://bit.ly/2x0OWMS cho bé

    ReplyDelete
  5. Help from online sources: Other than libraries, there are many assignment help online services which can take care of the sources you need during your study. There are e-Books, articles, and videos which will explain each concept very precisely.
    Assignment Help online
    Java Assignment help

    ReplyDelete
  6. We Provide assignment help for students especially in usa getting brilliant quality reviews writing USA, essays and dissertations.We at Top Quality Assignment believe that there is no shortcut to success and to attain success, hard work, dedication, and commitment must be present.AllAssignmentHelp.com reviews  best in writing unique Assignment.

    ReplyDelete
  7. Let this life come and go the natural way it wants. I have no reason to lament about this life because I was the first destination and was chosen to be born on this earth.
    bloons tower defense 5
    super smash flash 2

    ReplyDelete
    Replies
    1. I’m glad that you shared this useful info with us. thank you

      Delete
  8. Myassignmenthelp.co.uk have a team of excellent dissertation writer in uk who are Ph.D. certified and have years of experience in providing high-quality dissertation help and writing services. The team of our skilled writers has satisfied several students in UK. Our mission is to de-stress the students suffering from excessive academic writing pressure by offering them original content written from the scratch. We ensure our customers a 100% plagiarism free paper at an affordable price range. Avail our services and get your dream to score high grades fulfilled.

    ReplyDelete
  9. The editing and proofreading services may not be the most popular online services among the students, but they certainly play an essential role in preparing a quality assignment. If you are one of those students who submit their assignments without having a second look on them and then blame the professors for not awarding you with better grades, then this is the perfect opportunity to learn what went wrong.
    When you are provided with a lot of homework, the first thing which comes to your mind is if somebody could help you out. Today, we all lead a very hectic life, and there is no exception in a student’s life. To cope up with the existing competition students are often enrolled in several skill-building classes as well as extra academic courses. Hence, the students are left with no time to complete their homework accurately. This is why many companies have come up with their primary homework help services to assist them.

    ReplyDelete
  10. Thanks for sharing high value and informative article with us. And I hope you'll publish more article. proofread my essay

    ReplyDelete
  11. I would like to thanks for sharing high value and informative article with us. And i hope you'll sharing more idea's and keep writing more like this one. myassignmenthelp

    ReplyDelete
  12. I admire people who keep sharing valuable stories through great writing. I'm glad to have read this blog. Thanks and hope to read more soon. Check out Lawrence Todd Maxwell's page to learn more about real estate.

    ReplyDelete
  13. Get best Australia assignment help service by top academic writers at No.1 assignment assistance provider company My Assignment Help OZ.

    ReplyDelete
  14. Get top quality assignment help in Australia by most reliable Australian academic assistance provider company.

    ReplyDelete
  15. Thanks for sharing, nice post! Post really provice useful information!

    Giaonhan247 chuyên dịch vụ mua vòng tay pandora trên ebay hay vòng tay pandora úc từ các trang web mua hàng mỹ uy tín với chi tiết bảng giá cước gửi hàng đi mỹ cũng như cách mua hàng trên ebay ship về việt nam và giải đáp mua nước hoa pháp ở đâu uy tín nhất.

    ReplyDelete
  16. This post is a pool of information. The readers are quite impressed after reading this impressive post. This impressive post certainly encourages to choose Assignment Help Australia Services. You can email us at cs@Myassignmenthelpau.Com or Phone Number: +61-2-8005-8227

    ReplyDelete
  17. Very nice blog and articles. I am really very happy to visit your blog. Now I am found which I actually want. I check your blog everyday and try to learn something from your blog. Thank you and waiting for your new post. Assignment help

    ReplyDelete
  18. I have read your blog thoroughly you mentioned very good things in this.but you can improve this more by our online assignment help services.

    ReplyDelete
  19. Statistics is one of the most difficult subjects that are taught in the colleges and universities, and if you don’t particularly enjoy collection and analysis of data, you may have a difficult time coping with the academic pressure. Like any other field of academics, you also need to draft a number of statistics assignment help throughout the semester, and since they carry a significant amount of marks, there’s no way to avoid these daunting tasks.
    One of the most prominent issues the students have to deal with while writing assignments is plagiarism. Hence, they extensively use plagiarism checker to check if there are any copied content in the paper.
    Another major reason for using plagiarism checkers is that universities do not accept plagiarized content. Plagiarism is a serious offence. Hence, if found, the students are suspended or might even lose the grades.

    ReplyDelete
  20. Each & every tips of your post are awesome! The subject experts who provide online assignment help services can write and deliver flawless assignments exactly as per the requirements and guidelines provided by the universities. Contact us for professional Assignment Help services and we guaranteed higher grades!!
    Visit us@ Assignment Help

    ReplyDelete
  21. Students Assignment Help offers its qualified assignment writers from reputed universities around the world who are fluent in academic assignment writing and offers its best instant assignment help to the students. We deliver the assignments before the deadline.

    ReplyDelete
  22. Trinetra is a Coffee table book project on jyotirlinga promoting ,story of jyotirlinga,indian heritage,indian culture,jyotirlinga,hinduism,sadhoowad,name of jyotirlinga,Mallika Empire in whole world
    https://www.trinetra.co/

    ReplyDelete
  23. من الخدمات التي لا تقل أهمية عن كافة الخدمات التي تقدمها شركة تنظيف بالبخار بالرياض http://tiny.cc/lvph5y هي تنظيف موكيت ,ولأننا جميعاً نعلم أن الموكيت سهل التلف للغاية إذا تم غسله أو تنظيفه بطريقة غير صحيحة فتقوم شركتنا بتوفير هذه الخدمة على قدر عالي من الجودة باستخدام أجهزة تنظيف بالبخار على أعلى مستوى حتى يعود الموكيت نظيفاً وجديداً بدون أي تلف أو خسائر. .… اقرأ المزيد

    المصدر: شركة تنظيف بالبخار بالرياض

    افضل شركة نقل اثاث برابغ  http://tiny.cc/fxph5y طرق نقل العفش برابغ ؟
    تتمكن الشركة من القيام بأعمال نقل العفش برابغ اعتمادا على مجموعه من أفضل الطرق والأساليب ؛فقط يمكن الحديث عن أبرز الطرق :

    1-الاعتماد على الأوناش الحديثة
    تعتبر الأوناش الحديثة سواء الكهربية والهيدرليكية من أهم الأساليب المعتمد عليها فى أعمال نقل العفش ؛تلك الأوناش تتمكن من الوصول الى الأماكن الاكثر ارتفاعا بسهوله كبيرة ويتم الوصول الى النوافذ والقيام بأعمال نقل صحيحة ومميزة ؛فالأوناش توفر الوقت والجهد للقيام بأعمال النقل دون تعرض الاثاث لأى خدوش أو تكسير .

    يتم التوجه الى الأوناش بسبب ضيق حجم المنزل وعدم القدرة على نقل الاثاث بالطرق اليدوية ؛وأيضا كبر حجم الاثاث من الطرق التى تصعب من القيام بأعمال النقل بالطريقة الصحيحة ؛لذلك تعتبر الأوناش أفضل الوسائل المعتمد عليها ؛وتأخذ شركة نقل اثاث بالرياض فى اعتبارها القيام بأعمال صيانة سريعه ومميزة منعا للتعرض لأى تلفيات أو مشكلات أو مخاطر لأى عاملين يعتمدون على الأوناش فى القيام بالنقل.

    2-الاعتماد على السيارات الحديثة
    تعتمد شركة نقل عفش برابغ على مجموعه من السيارات الحديثة ذات الأحجام المختلفه من أجل القيام بأعمال نقل العفش بطريقه صحيحة ؛تلك السيارات تم اعدادها خصيصا من أجل القيام بنقل العفش من مكان الى مكان أخر ؛تلك السيارات لها مجموعه من الأغطية التى تحمى الأثاث بمختلف أشكاله من التعرض للأتربه أو الشوائب أو العوالق الخطيرة ؛كما أن الاثاث سرعان ما يتعرض للأمطار الغزيرة خلال فصل الشتاء .

    تلك السيارات تتمكن من القيام بأعمال نقل العفش من مكان الى مكان أخر ؛كما تتمكن الشركة من الانتقال الى كافه الأماكن واختيار الطرق الممهدة .

    3-الاعتماد على الناقلات
    تعتمد الشركة على مجموعه من أفضل الناقلات الحديثة التى تتمكن من تحمل جميع الأوزان ؛والحفاظ على سلامة المنقولات من مكان الى مكان أخر دون تعرض الاثاث لأى خدوش أو عوالق خطيرة .

    خطوات القيام بأعمال نقل العفش برابغ
    1-أعمال تعبئة العفش
    تعتمد الشركة على مجموعه من أفضل أدوات التعبئة والعلب الكرتونية والحاويات المختلف مساحاتها من أجل القيام بأعمال تعبئة صحيحة تساعد على حمايه الاثاث أو العفش من التعرض للعديد من الكسور والخدوش بأشكالها المختلفه .

    2-أعمال فك وتركيب الاثاث
    هذه الطريقه من أحدث الأساليب المعتمد عليها من أجل نقل الاثاث بطريقه صحيحة منعا للتعرض لأى خدوش أو تلفيات ؛لذلك يتم تفكيك قطع الاثاث الى قطع صغيرة ويتم ترقيمه بأرقام محددة مما يساعد الأمر على سهوله نقله من مكان الى مكان أخر وتركيبه مرة أخرى بعد التفكيك ؛لذلك يتم ترتيب العفش بطريقه صحيحة داخل السيارات من أجل سهوله نزوله مرة أخرى .

    3-أعمال تغليف الاثاث
    تتمكن شركة نقل اثاث برابغ من القيام بأعمال تغليف الاثاث اعتمادا على مجموعه من الأدوات المميزة سواء البطاطين السميكة التى تساعد على حمايه الاثاث من التعرض لأى خدوش أو قطع ؛كما يتم الاعتماد على فريق عمل مميز من أفضل العاملين المتخصصين اللذين لديهم خبرات واسعه فى اختيار أفضل أدوات التغليف من أجل حمايه الاثاث من التعرض للمزيد من الخدوش أو التلفيات أو القطع .

    4-أعمال تخزين العفش
    تعتمد شركة نقل عفش برابغ على مجموعه من أفضل أماكن التخزين سواء مجموعه من المخازن أو المستودعات الكبرى التى تمكن الأفراد من القيام بأعمال التخزين لكافه أشكال الاثاث مهما بلغت أوزانها أو أحجامها .… اقرأ المزيد

    المصدر: شركة نقل اثاث برابغ

    ReplyDelete



  24. Thankyou for the valuable information.iam very impressed with this one.
    Please do find the below attachment and kindly download latest mod apk form our website for free.

    live tv net
    ac market downloading
    acmarket download
    live tv net app
    live net tv
    mx player apk
    mx player pro
    tubemate apk
    https://apkmabbu.com/tubemate-apk/"
    tiktok
    tiktok apk

    ReplyDelete
  25. Most of the students fear of missing deadline and therefore stressed out with any kind of academic work. If you Buy Assignment Online, then you will be able to meet the deadline without any extra burden. Apart from this, there are also other reasons for which such a beneficial help can be availed.

    ReplyDelete
  26. Here, you can find the best & cheap essay writing service USA. Our custom drafting, editing, proofreading, citing and formatting, at your request. Being skilled essays editors and proofreaders, they are quite proficient at the paper. In fact, we have some of the fastest essay typers in our team. Besides, we offer cheap essays, which are quite affordable for every student (irrespective of their financial background). Choose Assignmenthelp.us. Have you ever started any task without thinking about how it should end or what should be the end result of it? Well, if you have, then it will easier for you to understand what an exploratory essay is. This form of essay is quite different from rest of the types of academic writing. While most of the essay types demand the writers to remain objective and use evidence to accomplish the goal, how to write an exploratory essay without any particular end in mind. While writing such essays, you as an essay writer may or may not have a perception of the subject or any particular opinion about the topic. While writing the paper, you allow the research work and your actions determine the results.

    ReplyDelete
  27. The first step in cheap essay writing service USA is the choice of topic. The topic that is chosen by the writer determines the quality of the paper. Contact our Custom Research Paper Services company today!

    ReplyDelete
  28. Awesome article, it was exceptionally helpful! I simply began in this and I'm becoming more acquainted with it better! keep doing awesome!
    Ludo Free
    Ludo King
    Board Game
    Ludo Board Game
    Ludo Game

    ReplyDelete
  29. Informative article it deserves all the praise. When you come to us with the objective to take the Assignment Help. We ensure that your assignment receives the right treatment. Feel free to use our my assignment help services at any time that you need it.

    ReplyDelete
  30. Thanks for posting this info. I just want to let you know that I just check out your site and I find it very interesting and informative. I can't wait to read lots of your posts. If you're looking for CDR Report Help. You can email us at cs@needcdrreport.com or Phone Number: +61-2-8005-8227

    ReplyDelete
  31. As much as a Research Papers for Saleis a summary of other works that should not be an excuse to make papers with College Research Papers for Sale.

    ReplyDelete