Android/Steek.A!tr

description-logoAnalysis

Android/Steek.A!tr is a trojan targetting Android mobile phones.
It disguises as legitimate popular games such as "BattleField Bad Company 2", "Call Of Duty Zombies", "World Of Goo" or "FIFA 2012". Those malware were found on the Android Market, published under the developer name of "Stevens Creek Software".

Technical Details


Once installed, the trojan shows an icon of the legitimate game in the launcher menu:

When launching the application however, it shows a message prompting the victims to give away their email addresses to unlock the game:

The victims are then taken to the website http://[REMOVED].info/ to enter their personal details.

Once the details are submitted, victims are redirected to shady websites either advertising "Make money easy" schemes or fake lottery and prizes.



recommended-action-logoRecommended Action

    FortiGate Systems
  • Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option.
    FortiClient Systems
  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Telemetry logoTelemetry

Detection Availability

FortiClient
Extreme
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR

Version Updates

Date Version Detail
2022-05-18 90.02410
2022-02-09 89.09473
2021-05-18 86.00262
2021-03-03 84.00441
2021-02-06 83.83100
2021-02-05 83.82900
2020-11-25 82.09300
2019-11-21 73.23100