Thinking of sending an MMS message to a loved one? Think twice before downloading mobile applications that promise just that. Instead of making someone's day, you might have unknowingly been victimized by an SMS Trojan that poses as an MMS app, Microsoft warns, "We came across a downloadable file named "love_mms.rar" (c0974da6494118324b1eb2ba4ae47a96a8e3b6c1) that contains aa JAR installer named "jimm2010.jar" (40175bc9057fb8a0ce4fa09b6daa491bfa6051db, that we detect as Trojan:Java/Jifake.A) and several pictures with Russian file names related to Valentine's Day. This file is available for download from certain websites and may be targeting subscribers on Russin mobile network," stated MMPC.
Examples of the image files included in the archive are:
If the user clicked on the installer, then while the user is busy sending these images, the code in the installer sends SMS messages to a Russian premium SMS short code number, which can charge the user without his or her knowledge.
Note: The JAR installer runs on any mobile platform that supports Java, such as Symbian and Windows CE operating systems.
[tags]mms,messages,mobile security,sms,sms trojan,,russianmms app,jar[/tags]