The Register® — Biting the hand that feeds IT

Feeds

Windows mobile Trojan poses as war game

Shoot 'em up racks up premium rate calls

Miscreants have created a Trojaned version of a Windows mobile game that makes expensive international phone calls from compromised smartphones.

Pirated versions of 3D Anti-terrorist action, a first-person shooter developed by Beijing Huike Technology in China, and uploaded onto several Windows Mobile freeware download sites, come with a nasty add-on courtesy of Russian virus writers. Compromised phones start attempting to silently make expensive international calls without user involvement, as reported in a thread on the XDA-Developers' forum, featuring the experience of a UK victim of the Trojan.

Analysis of the malware by Finnish security firm F-Secure reveals that the malicious code initiates several phone calls to international premium-rate numbers. Presumably VXers receive a percentage of the resulting revenue.

In any case, F-Secure Mobile Security has been updated to detect and block Trojanized versions of this game. Other anti-virus firms can be expected to follow, though the best defence is not to download copies of the game in the first place, of course.

A full write-up of the threat, complete with screenshots, can be found in an informative blog posting by Mikko Hypponen, chief research officer at F-Secure, here.

Using illicit copies of mobile games to trick users into downloading malware has happened before, albeit infrequently, and is far from restricted to Windows mobile devices. F-Secure compares the latest Trojan mobile game to a game called Mosquitos from six years back that bit users of Symbian smartphones by sending premium-rate SMS messages. ®

oh...

stfu.......

i do recall a article on the register a few weeks back about a exploit on the apple twatphone....

be it a jailbroken one... coz users are fed up of the handcufs

4
0

the answer

Make the telephone service provider confirm verbally that person calling premium rate number is

1. the contract owner

2. of age

They already do this for UK premium rate lines, if the telephone owner cannot be confirmed to be making the call and is aged appropriately then it is not chargable.

remove this profitable loophole for the thieves and the problem goes elsewhere

2
0

Perhaps this technique could be used...

...to make FACT self-financing?

0
0

I have to wonder..

..why someone hasn't done this for the iphone already. So many apps being made for the app store, I don't think whatever review service Apple have is going to cope with a determined effort to get malware in there.

Yeah, it'll get caught/blocked eventually. After how many premium rate calls/texts?

0
0

Whoops!

Fragged!

0
0

More from The Register

 breaking news
Apple cored: Samsung sells 10 million Galaxy S4 in a month
Beware of South Koreans bearing Android
Microsoft reveals Xbox One, the console that can read your heartbeat
Upgrades Live service – and no always-on requirement
US boffin builds 32-way Raspberry Pi cluster
Beowulf cluster built for the price of a single PC
Review: HP Pavilion 14 Chromebook
All roads lead to Chrome?
Euro PC shipments plummet into bottomless pit of DOOOOM
11th quarter of decline, 20pc drop on last year - Gartner
Fairphone goes on sale to all
The Android handset that's PC can be yours
Nintendo throws flaming legal barrel at YouTubing fans
All your walk-through vid revenue are belong to us

Hands on with Hyper-V 3.0 and virtual machine movement

Our award-winning Regcasts have teamed up with training provider QA for the deepest of deep dives into Hyper-V, including a live demo.

Understand VM movement - just click to play, or go here for a bigger version.