Threat Database Trojans Trojan:SymbOS/Spitmo.A

Trojan:SymbOS/Spitmo.A

By Domesticus in Trojans

Threat Scorecard

Ranking: 5,501
Threat Level: 20 % (Normal)
Infected Computers: 3,227
First Seen: October 28, 2011
Last Seen: September 18, 2023
OS(es) Affected: Windows

Trojan:SymbOS/Spitmo.A is a dangerous Trojan that may steal information from the corrupted device. Trojan:SymbOS/Spitmo.A is a Symbian component of a Trojan.Spyeye. Trojan:SymbOS/Spitmo.A runs on a mobile device together with Trojan.Spyeye, which would have previously been installed on a user's PC. Trojan.Spyeye controls Internet activity on the computer and when the user visits an online banking website, it asks the user to enter the IMEI (International Mobile Equipment Identity) of the device and their mobile phone number. This is done under the pretense of a certificate that needs to be sent to the mobile device. The remote attacker then generates a validated certificate using the IMEI number and sends a copy of Trojan:SymbOS/Spitmo.A to the PC user's Symbian mobile device. Trojan:SymbOS/Spitmo.A then adds system files on the mobile device. Trojan:SymbOS/Spitmo.A controls the inbox on the mobile device for an MTAN (Mobile Transaction Authentication Number) that is sent by the user's online bank. Trojan:SymbOS/Spitmo.A sends this information to a remote attacker so that it can be used to execute an illegitimate transaction. Get rid of Trojan:SymbOS/Spitmo.A instantly after detection.

File System Details

Trojan:SymbOS/Spitmo.A may create the following file(s):
# File Name Detections
1. C:\sys\bin\Sms.exe
2. C:\sys\bin\SmsControl.exe
3. C:\private\10003a3f\import\apps\SmsControl_reg.r01
4. C:\Private\E13D4ECD\first.dat
5. C:\resource\apps\SmsControl.r01
6. C:\Private\E13D4ECD\settings.dat
7. C:\Private\EAF7F915\data.txt
8. C:\resource\apps\SmsControl_aif.mif

URLs

Trojan:SymbOS/Spitmo.A may call the following URLs:

click-this-special.video

Trending

Most Viewed

Loading...