Android package file
The Trojan may arrive as a package with the following characteristic:
When the Trojan is being installed, it requests permissions to perform the following actions:
Send and receive SMS messages
Once installed, the application will display an icon of a shield with the text "certificato mobile".
The Trojan then monitors incoming SMS messages and forwards them to other specific mobile numbers.
The Trojan pretends to be a security product.
When it is installed, it asks the user to input a password.
The program then displays an image of a shield and the text "SECURED".
Symantec Security Response encourages all users and administrators to adhere to the following basic security "best practices":