Android Malware Uses Google Talk to Make Mysterious Calls

Pawost starts its pernicious conduct after clients introduce it. When this happens, the application demonstrates a Google Talk symbol in the cell phone's warnings territory. There's no content with this symbol, and the notice is obvious that something isn't right and you ought to uninstall the application at the earliest opportunity.

A couple of minutes after the fact, the application will begin making calls to a few obscure numbers, utilizing the Google Talk application.

While Pawost makes these calls, the telephone's screen is killed, however the CPU is exceptionally well alive and working.

Pawost makes calls to strange Chinese telephone numbers

The puzzle around these telephone calls is that they don't go to a legitimate number. All begin with the same grouping: 1-259.

Prepending the +1 US global prefix doesn't interface with a legitimate number. The region code 259 is not alloted in the US, so without a doubt, the crusade ain't focusing on US clients.

Since Pawost was packaged with an Android application with a Chinese interface, Malwarebytes specialists additionally took a stab at including the +86 China worldwide prefix.

Their test telephone calls associated with substantial numbers, yet all replied with a bustling line. Now, it was clear the application was focusing on Chinese clients.

Pawost can likewise send SMS messages

Security analysts investigated the Pawost malware and said that other than setting these unlawful calls, the application additionally included spyware abilities.

The malware can gather information, for example, IMSI codes, IMEI numbers, CCID identifiers, telephone numbers, telephone form subtle elements, and a rundown of applications introduced on the gadget.

Pawest takes this information, encodes it, and sends it to a remote server. Moreover, the trojan can likewise send SMS messages and square approaching SMS messages. Malwarebytes said they discovered this last usefulness in the Pawost decompiled source code, however never watched it in their tests.