Trojan:Java/SmsSy.A

Trojan:Java/SmsSy.A is a Trojan that spreads in Malaysia through SMS messages. Trojan:Java/SmsSy.A affects mobile devices with Java midlet installed. Trojan:Java/SmsSy.A is masked as a content update from Samsung sent via an SMS message. The bogus SMS message carries an infected link, which, once clicked, takes the recipient to another link (http://mmgbu[...].com:90/[...].jar) that diverts to a JAR file. This JAR file encompasses the information for Trojan:Java/SmsSy.A to send SMS messages to many short numbers. After successful execution, Trojan:Java/SmsSy.A would send three SMS messages, most likely to premium numbers, without the victims' permission. Then, Trojan:Java/SmsSy.A will illustrate some 'HOT WEB DL' and lady images which are classified into five options: BEACH GIRLS, DANCE CLUB, GT MODEL, FUNNY VIDEO and HOT CAM. When the affected user selects the option, Trojan:Java/SmsSy.A will send out SMS messages that include the string ?On (content)? to (number), where the contents/numbers could embrace MODEL, HB, AV, LY, GA/33499, 33499, 36660, 36660, 36989.