Java/Hoaxer.A!tr.dial

Analysis

Java/Hoaxer.A!tr.dial is classified as Trojan with dialing capabilities. It runs on any phone supporting Java.

Technical Details

This malware starts a thread in which it attempts to send an SMS message to a hard coded short code with a hard coded text. The short code and text vary from one sample to another. For example, the malware sends an SMS to 4460, with the text "maxenter".
The malware's user interface is usually written in Russian.

Recommended Action

FortiGate Systems

• Check the main screen using the web interface for your FortiGate unit to ensure that the latest AV/NIDS database has been downloaded and installed on your system - if required, enable the "Allow Push Update" option.
  FortiClient Systems
  
• Quarantine/delete files that are detected and replace infected files with clean backup copies.