A strain of resilient Android Trojan has infected 500,000 devices, mainly in China.
SMSZombie is designed to exploit security shortcomings in the mobile payment system used by China Mobile to generate unauthorised payments. The malware also steals bank card numbers and money transfer receipt information, mobile security firm TrustGo explains.
The malware poses as "wallpaper" applications featuring racy titles and nude photos. Users who install these dodgy apps get infected. Disinfecting devices is a tricky process because the malware disables users' ability to simply delete it, TrustGo warns.
Security Week adds that the malware has already infected 500,000 smartphones and other devices running Android.
SMSZombie has been found on China’s largest mobile app marketplace, GFan. TrustGo's SMSZombie removal instructions can be found here. ®