There is reason to believe that more increasingly complex mobile attacks with follow. With the phishing email, the backdoor will spread more easily. This is a new type of mobile security threat that works just like a phishing site or phishing SMS. Then it visits hxxp:///path/Linker.php to get commands.Īccording to the commands, it will perform lots of malicious activities. By executing, it links to hxxp:///path/DeviceManager.php to register the victim device info. Maybe it only wants you to install it and click the button. The backdoor is full of malicious functions, but the GUI is a little simple and crude. In this case, the Android apk in the phishing email is a powerful and aggressive backdoor which is detected as. So, most people will believe these phishing emails and are likely to install the fake mobile security app. And mobile security is generally considered to be a weak point. It contains user contacts, text messages, photos and call logs.

In most cases, a mobile device is more important than PC for users. Mobile security is related to user privacy. We think it’s a new trend in spreading virus. Most email phishing attacks tend to target PC users, but this time the attackers have turned their attention to mobile platforms.

From the context we can presume the intended targets are users in Poland. It prompts recipients to install the fake Kaspersky Android app to protect their mobile security. This week, our virus lab handled a case where a customer received a phishing email with an Android Backdoor archive masquerading as a Kaspersky mobile security app (we are aware that those who created this app are also disguising it as apps from other major AV brands).

Kaspersky android