Android.MMarketPay.origin: Trojan-shopaholic from China

The company "Doctor Web," said the distribution of a new Trojan, damaging mobile devices running Android. However, this malicious program is a danger to users of Chinese telecommunications operator China Mobile: infecting a mobile device, Android.MMarketPay.origin shall purchase applications in the electronic store operator, which significantly reduces the funds in the account number. operator China Mobile has at its disposal under the e-shop called Mobile Market, which includes both paid and free content. Mobile Market is functioning perfectly standard way: when a purchase is made ​​service system sends the subscriber a special code to be entered to confirm. The cost of content continue to be debited directly from the mobile user's account. main purpose of the new malware Android.MMarketPay.origin - uncontrolled purchase paid apps in the store. The Trojan performs all the steps automatically, capturing the necessary verification code and confirming the shopping. This malicious program could be established as to increase the profits of unscrupulous developers of applications, as well as for subscribers only harm the image of China Mobile and the operator itself, experts say. Android.MMarketPay.origin distributed in modified Android-malicious programs that are available for download on various Chinese forums and directory applications. The following shows the functions that will have access to the program after installation (on the left - the original, right - a modified version of the attackers):

Access to work with SMS-messages needed to capture the Trojan code verification. Everything else, Android.MMarketPay.origin can also bypass the image verification captcha, sending them to a special server for analysis. The company "Doctor Web" said that users of Dr.Web products for Android protected from the effects of this malicious program.