Android SandroRAT Poses as Kaspersky Mobile Security

A phishing campaign currently targeting Android users in Poland delivers emails that purport to be from a bank alerting them that their mobile device is infected and offering a fake mobile security solution for eliminating the malware.

The file poses as Kaspersky Mobile Security and it is actually a version of SandroRAT, a remote access tool devised for Android, whose source code has been put on sale on HackForums since December last year.

According to McAfee mobile malware researcher Carlos Castillo, the package distributed by the phishing campaign is capable of executing several commands on the affected device and it can be used for stealing sensitive details and uploading them to a command and control (C&C) server.

The researcher says that the malware gives the attacker unrestricted access to the contact list, call logs and short text messages stored on the phone. Moreover, they can access the browsing history, bookmarks, and GPS location data.

More details & screenshot -
http://news.softpedia.com/news/Android-SandroRAT-Poses-as-Kaspersky-Mobile-Security-453358.shtml