Thursday, June 6, 2013

Android Ikangoo "Porn" Trojan


      Another variant of  Android trojan SmsReg has been spotted in the wild, This one called Ikangoo, and is named after the website it downloads from.

      "Dial/SmsReg!Android" is an application for mobile phones running Android which silently registers the victim to non-free services. It usually comes as a sexy or dating application, and silently sends SMS messages to particular short numbers that subscribe the victim to the corresponding service. The subscription is not free. Its costs depends on the victim's country and the service he/she subscribes to. For instance, it can go up to 10 dollars per month."

(http://www.fortiguard.com/search.php?action=detail_by_virus_name&data=Dial/SmsReg!Android)


      Like versions in the past this one uses adult porno videos that are actually hosted online for free.  It signs you up to a monthly fee on your phone bill silently.  If you don't have service you receive a pop-up telling you that you can't activate these in your area.

      The downloads of the different versions for language and "featured girl" can be found:


hxxp://android.ikangoo.es/apps/xvideoz/apks/COOL3/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks/COOL4/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks/JUANCA3/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks/JUANCA4/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks/JUANCA5/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks/KAB/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks/PUBLIC/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks/REPOR2/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks/TEST/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks/XVIDEOZ/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks/XVIDEOZ/xvideoz2.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks3/XVIDEOZ/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks3/REPOR2/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks3/PUBLIC/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks3/JUANCA5/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks3/JUANCA4/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks3/JUANCA3/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks3/COOL4/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks3/COOL3/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks2/XVIDEOZ/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks2/TEST/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks2/REPOR2/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks2/PUBLIC/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks2/JUANCA5/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks2/JUANCA4/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks2/JUANCA3/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks2/COOL4/xvideoz.apk
hxxp://android.ikangoo.es/apps/xvideoz/apks2/COOL3/xvideoz.apk


      I would recommend to not download adult content on to your phone as it is not regulated by anyone.  However, the adult industry is huge and it is making its way into the Android markets There are safe "18+" apps out there if one is to look for them. With that said though be mindful of any app that claims to be free porn...  Google Play doesn't allow for nudity so any adult app must be downloaded in an alternate market.  These alternate markets are dangerous and full of the kind of malware that security experts warn about all the time, so at the very least download a mobile Antivirus and keep you device "STD" free. You can get them free right off the Amazon market worldwide.


Stay safe out there
-R`/4N