1. /
  2. Security Response/
  3. Android.Opfake

Android.Opfake

Risk Level 1: Very Low

Discovered:
January 27, 2012
Updated:
May 16, 2012 7:47:57 AM
Type:
Trojan
Infection Length:
Varies
Systems Affected:
Android
Android.Opfake is a detection for Trojan horses on the Android platform that send SMS texts to premium-rate numbers.

Android package file
The Trojan may arrive as one of the following APK packages:


Package name: wap.syst.two
File names: installer.apk, new_opera.apk, skachat.apk
Name: Installer
Version: 1.0




Package name: com.some.opera
File names: Opera_Mini_6.apk
Name: Opera Mini
Version: 1.0




Package name: com.soft
File names: Opera_Mini_4_4.apk, Opera_Mini_5_1.apk, Opera_Mini_6_1_Android.apk, Opera_Mobile_11_5.apk
Name: Install
Version: 1.0

For more information, please see the following resource:
Android.Opfake In-Depth

Antivirus Protection Dates

  • Initial Rapid Release version January 27, 2012 revision 002
  • Latest Rapid Release version June 24, 2014 revision 006
  • Initial Daily Certified version January 27, 2012 revision 001
  • Latest Daily Certified version October 24, 2014 revision 002
  • Initial Weekly Certified release date February 1, 2012
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Medium
  • Payload: Sends premium-rate SMS messages from the compromised device.

Distribution

  • Distribution Level: Low
Writeup By: Asuka Yamamoto and Costin Ionescu

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver