The folks over at Lookout have warned us about a new malware threat, this time targeted at users outside of North America.  The RuFraud malware will sign up users in Russia, Azerbaijan, Armenia, Georgia, Czech Republic, Poland, Kazakhstan, Belarus, Latvia, Kyrgyzstan, Tajikistan, Ukraine, Estonia, Great Britain, Italy, Israel, France, and Germany to a premium SMS service by hiding inside apps that pretend to be download helpers for popular games and utilities, or wallpaper apps from movies like TwilightThis particular bit of malware does not affect users in other countries.

While most of the affected applications are found on file-sharing sites and unofficial markets, some have appeared in the official Android Market.  The first batch were removed by Google after Lookout contacted them, and having only a "handful" of downloads they did not affect very many users.  Unfortunately, 13 new apps were later uploaded that had been downloaded over 14,000 times before they were pulled.  Lookout has been updated to remove and clean these apps from your phone if you downloaded them, and we expect other malware scanning applications will have followed suit.

A quick tip: It really sucks when popular applications (or Nexus phones) aren't available in your location.  We understand.  But any app that claims to be a helper to download an app that's otherwise unavailable is definitely suspicious.  Don't use them.  If the apps are free, ask your friends.  Ask on forums.  Root your phone, or use an app that disguises your location and opens the Market.  I'm not condoning piracy here, but I'm a realist -- if you're going to circumvent measures that keep these apps from you, do it the smart way.

Source: Lookout


Reader comments

RuFraud malware causes premium SMS charges for folks in Asia and Europe, apps pulled from Market


Suggesting that people too gullible to avoid malware root their phones.....?!??

What could possibly go wrong with that?!

Google really needs to get a handle on the official Android Market, if only for a pr standpoint. I agree that if you go looking for pirated apps in a black marketMarket you get ...what you deserve, but the official Market associated with the Android and Google name?

Yes... The Google Name is really taking a hit.. with the failure of the Galaxy Nexus before it's even left the gate... How Sad.. How long do you think it will take to repair and test the phone before they can launch it?

Blazing.. On my 1,300 mhz Droid Charge.. Awaiting KAL-EL...