An information-stealing Android Trojan identified as Loozfon that is being used in a campaign aimed specifically at female Japanese users has been spotted by Symantec researchers.
Cybercriminals use different ideas and methods in order to trick users into installing malware applications. In many of their campaigns, they lure male victim by enticing them to view videos or pictures of sexual content.
Since adult videos don’t attract women as much as they attract men, scammers have come up with more suitable topics: how to make money online and how to meet wealthy men.
The first version attempts to lure victims by sending emails stating how the recipient can easily make some money. The email includes a link to a site that appears to be designed to assist women to make money simply by sending emails. When a certain link on the site is clicked, Android.Loozfon is downloaded onto the device.
"If this trick does not work, the criminal group has another trick up its sleeve. It also sends spam that states that the sender of the email can introduce the recipient to wealthy men. When the link included in the body of the email is clicked, the malware is automatically downloaded onto the device." Symantec researcher said.
 |
| Loozfon Android Trojan |
This Loozfon malware steals contact details stored on the device as well as the phone number of the device, which is the main goal of the malware.
"The scammers are likely harvesting email addresses in order to send spam to the contacts they were able to steal to lure them to the dating service site and/or sell the data to another group of spammers." Researcher said.
