New Android SMS Malware Called UpdtBot

Tuesday, April 17th, 2012

Dr. Xuxian Jiang at North Carolina State University along with the NQ Mobile Security Research Center have began alerting Android users of the newest threat called UpdtBot. The new android malware passes itself off as a system update and spreads via SMS messages linking to the malware. Once UpdtBot is installed it registers a remote C&C (Command and Control) server. This C&C server will infect the Android device and start sending out SMS messages, make phone calls and download and install applications on your device.

From what NQ Mobile has estimated there are around 160,000 Android users already infected with this malicious software. If you want to be sure you don’t have it install some anti-virus software on your device and scan now. We recommend Lookout Mobile Security although there are many out there that will do the job.

If you are just against adding anti-virus apps to your Android device then at least be sure to only install apps from trusted sources like Google Play, Amazon App Store and GetJar. Also you can see permissions of apps when they are installing don’t just skip over them this can help you maintain a clean device.

APK: cn.smstelphoneapp Version: 1.0
Discovered: April 16, 2012
Updated: April 16, 2012 2:23:58 PM
Type: Trojan
Infection Length: 23,536 bytes
Android.Updtbot is a Trojan horse for Android devices that may arrive through SMS messages. It may then open a back door on the compromised device.