1. Symantec/
  2. Security Response/
  3. Android.Citmo


Risk Level 1: Very Low

December 14, 2012
March 7, 2014 5:25:52 PM
Infection Length:
Systems Affected:
Android.Citmo is a Trojan horse for Android devices that steals information from the compromised device.

Android package file
The Trojan may arrive as a package with the following characteristics:

Package name:
  • com.alfasafe
  • com.sbersafe
  • com.vksafe


  • VkSafe
  • SberSafe
  • AlfaSafe

Once installed, the application will display an icon with a green semi-circle and Cyrillic characters on a white background, a white V and K on a blue background, or a red robot character on a white background.

Antivirus Protection Dates

  • Initial Rapid Release version December 14, 2012
  • Latest Rapid Release version December 14, 2012
  • Initial Daily Certified version pending
  • Latest Daily Certified version pending
  • Initial Weekly Certified release date December 19, 2012
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Mario Ballano

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube