howtothings.co.uk
Android Trojan disguised behind QR codes - Printable Version

+- howtothings.co.uk (https://www.howtothings.co.uk)
+-- Forum: Computing (https://www.howtothings.co.uk/forumdisplay.php?fid=4)
+--- Forum: Gaming Talk, Mobile Phones, Tablets, Portable and Apple Devices (https://www.howtothings.co.uk/forumdisplay.php?fid=19)
+--- Thread: Android Trojan disguised behind QR codes (/showthread.php?tid=1075)



Android Trojan disguised behind QR codes - Mark - 06-10-2011

Android Trojan disguised behind QR codes


A malicious QR code has been found on a website which when scanned directs users to a URL that contains Android malware, jimm.apk to be precise.
The file is a trojanised version of the Jimm mobile ICQ client, infected with Trojan-SMS.AndroidOS.Jifake.f which sends a number of SMS messages to a $6 a message premium rate service.

These QR codes seem to only now be appearing online, although Kaspersky has noted J2ME-based versions of the malware being distributed via QR codes as well.

[Image: orange-android-logo.png]




RE: Android Trojan disguised behind QR codes - Fireren - 07-10-2011

Crap, I have an iPhone but a bunch of my friends have Androids. Do you know if this has been fixed?


RE: Android Trojan disguised behind QR codes - Mark - 07-10-2011

This one inparticular may of been fixed but the issue is still there. All the QR code is doing is redirecting you to a malicious site, so you scan the QR code which say has the value of www.sitea.com, sitea then checks for vulnerabilities on your phone before sending you to www.siteb.com which is ready with the exploit.


RE: Android Trojan disguised behind QR codes - Fireren - 09-10-2011

Awww crap. When will they patch this fully ?