Users who have downloaded the “Magic Browser” application from the Google Play Store should immediately uninstall it, as security researchers have revealed that this is yet another trojan that has managed to infiltrate Google's online app store.
The Magic Browser application was launched on the PlayStore as an alternative to Google Chrome, displaying significant similarities to the original browser, and was downloaded tens of thousands of times in less than a month.
The app has the ability to send text messages to premium services and phone numbers controlled by the attackers, leading to high charges for victims. To avoid detection, the malicious app also has the ability to delete incoming messages, as well as disable device sound notifications.
According to Kaspersky Lab analysis, the app uses 11 different methods to send SMS and implements these methods in an unusual way: by processing page loading errors after receiving a corresponding command from the C&C Server. In addition to sending Premium rate SMS, the app also has the ability to open advertising urls, as well as pages that carry charges for WAP devices, burdening victims financially.
The application has now been removed from Google Play, however users who had installed it should delete it immediately and restore their smartphone to factory settings.
