06-10-2011, 07:24 PM
Android Trojan disguised behind QR codes
A malicious QR code has been found on a website which when scanned directs users to a URL that contains Android malware, jimm.apk to be precise.
The file is a trojanised version of the Jimm mobile ICQ client, infected with Trojan-SMS.AndroidOS.Jifake.f which sends a number of SMS messages to a $6 a message premium rate service.
These QR codes seem to only now be appearing online, although Kaspersky has noted J2ME-based versions of the malware being distributed via QR codes as well.
![[Image: orange-android-logo.png]](http://markwood.co.cc/donotdelete/other/orange-android-logo.png)
A malicious QR code has been found on a website which when scanned directs users to a URL that contains Android malware, jimm.apk to be precise.
The file is a trojanised version of the Jimm mobile ICQ client, infected with Trojan-SMS.AndroidOS.Jifake.f which sends a number of SMS messages to a $6 a message premium rate service.
These QR codes seem to only now be appearing online, although Kaspersky has noted J2ME-based versions of the malware being distributed via QR codes as well.