Android/Steek.A!tr
Analysis
Android/Steek.A!tr is a trojan targetting
Android mobile phones.
It disguises as legitimate popular games such as
"BattleField Bad Company 2", "Call Of Duty Zombies",
"World Of Goo" or "FIFA 2012". Those malware were found on the Android Market, published under the
developer name of "Stevens Creek Software".
Technical Details
Once installed, the trojan shows an icon of the legitimate game in the launcher menu:
When launching the application however, it shows a message prompting the victims to give away their email addresses to unlock the game:
The victims are then taken to the website http://[REMOVED].info/ to enter their personal details.
Once the details are submitted, victims are redirected to shady websites either advertising "Make money easy" schemes or fake lottery and prizes.
Recommended Action
- FortiGate Systems
- Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option.
FortiClient Systems
- Quarantine/delete files that are detected and replace infected files with clean backup copies.
Telemetry
Detection Availability
FortiClient | |
---|---|
Extreme | |
FortiMail | |
Extreme | |
FortiSandbox | |
Extreme | |
FortiWeb | |
Extreme | |
Web Application Firewall | |
Extreme | |
FortiIsolator | |
Extreme | |
FortiDeceptor | |
Extreme | |
FortiEDR |