Android trojan spreads through Cutwail spam botnet

Share this article:

An Android trojan is being spread through one of the world's largest spam botnets.

According to an analysis posted last month by Brett Stone-Gross, a senior security researcher at Dell SecureWorks Counter Threat Unit, the trojan, called Stels, is delivered through emails sent by the Cutwail spam botnet.

The phishing emails lure users into clicking malicious links that appear to be an Adobe Flash Player update.

Stels is capable of stealing mobile users' contact lists and sending or intercepting text messages. It can also uninstall applications, make phone calls, including those to premium numbers, and deploy additional malware.

Though Stels cannot "root" Android devices, it can operate on nearly all versions of the mobile operating system, Stone-Gross said.

Share this article:

Sign up to our newsletters

More in News

New backdoor 'Baccamun' spreads through ActiveX exploit

Symantec researchers revealed that the backdoor is dropped after attackers exploit a Windows ActiveX vulnerability.

Outdated browsers put U.K. users at risk of malware

A blog post on Check and Secure website said 70 percent of U.K. users haven't fully updated their internet browsers

Survey: 53 percent change privileged logins quarterly

A Lieberman Software survey highlights the issue or poor password management, even among security pros.