The new Android virus MMarketPay. A is infected with more than 10 mobile phones

A new mobile phone virus named MMarketPay. A has already spread in China. Currently, about 0.1 million mobile phones are infected, involving 9 app stores in China.

This virus was discovered by TrustGo and named it 'mmarketpay. a'-the malware will automatically buy software from the domestic App Store (M-Market. TrustGo provides evidence that the applications of the following third-party app stores have been affected: nDuoa, GFan, AppChina, LIQU, ANFONE, Soft.3g.cn, TalkPhone, and AZ4SD.

When users download infected applications from these stores, there may be a risk of cumulative bills. MMarketPay. A can block the text message security steps, and you do not need to confirm that you can directly customize the billing service from M-Market.

The TrustGo team explained how the M-Market payment system works and how the virus was cracked:

Customers login at M-Market website (http://mm.10086.cn /).

No login required if f you are using CMWAP as Access Point. m-Market will send a verification code to you via SMS if customer purchased paid apps or contents. customers receive the verification code and input it to M-Market for verification.

Once the verification completed, the market will download apps automatically. China Mobile will add this order in mers MERs 'phone bill.

[The virus] MMarketPay. A can place orders via M-Market payment system automatically:

Changes the APN to CMWAP, so that it can login MMarket automatically.

Finds paid application and simulates the click action in background.

Intercept the specified ed SMS messages and collect verification code sent by M-Market. If CAPTCHA image is invoked, it will post the image to remote server for analyzing the verification code.

Post the verification code to M-Market website.

Download the application and customers get charged.

M-Market also contains a lot of charged video content, which can be searched, played, and downloaded by viruses. This process is unknown to mobile users.

MMarketPlay. A currently only affects the domestic application ecosystem, and Google Play is not affected.