The new Android virus MMarketPay. A is infected with more than 10 mobile phones

Source: Internet
Author: User

A new mobile phone virus named MMarketPay. A has already spread in China. Currently, about 0.1 million mobile phones are infected, involving 9 app stores in China.

This virus was discovered by TrustGo and named it 'mmarketpay. a'-the malware will automatically buy software from the domestic App Store (M-Market. TrustGo provides evidence that the applications of the following third-party app stores have been affected: nDuoa, GFan, AppChina, LIQU, ANFONE, Soft.3g.cn, TalkPhone, and AZ4SD.

When users download infected applications from these stores, there may be a risk of cumulative bills. MMarketPay. A can block the text message security steps, and you do not need to confirm that you can directly customize the billing service from M-Market.

The TrustGo team explained how the M-Market payment system works and how the virus was cracked:

Customers login at M-Market website (http://mm.10086.cn /).

No login required if f you are using CMWAP as Access Point. m-Market will send a verification code to you via SMS if customer purchased paid apps or contents. customers receive the verification code and input it to M-Market for verification.

Once the verification completed, the market will download apps automatically. China Mobile will add this order in mers MERs 'phone bill.

[The virus] MMarketPay. A can place orders via M-Market payment system automatically:

Changes the APN to CMWAP, so that it can login MMarket automatically.

Finds paid application and simulates the click action in background.

Intercept the specified ed SMS messages and collect verification code sent by M-Market. If CAPTCHA image is invoked, it will post the image to remote server for analyzing the verification code.

Post the verification code to M-Market website.

Download the application and customers get charged.

M-Market also contains a lot of charged video content, which can be searched, played, and downloaded by viruses. This process is unknown to mobile users.

MMarketPlay. A currently only affects the domestic application ecosystem, and Google Play is not affected.

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.