Xafecopy: A new malware detected that steals money from users' phones

A new malware, named as Xafecopy Trojan is detected in India that steals money from users' mobile phones, according to a report from Kaspersky Labs. The report said, "Kaspersky Lab experts have uncovered a mobile malware targeting the WAP(Wireless Application Protocol) billing payment method, stealing money from victims' mobile accounts without their knowledge."

Xafecopy Trojan is disguised as useful apps like BatteryMaster and operates normally. The trojan secretly loads the malware onto the device. Once the app is activated, Xafecopy secretly clicks on web pages with WAP billing system. After this the malware silently subscribes the phone to a number of services, the report said.

The process does not require the user to register a debit or credit card or set up credentials. The malware uses technology to bypass captcha systems designed to protect users by confirming the action is being performed by a human.

"Xafecopy hit more than 4,800 users in 47 countries within the space of a month, with 37.5 percent of the attacks detected and blocked by Kaspersky Lab products targeting India, followed by Russia, Turkey, and Mexico," the report said.

Kaspersky Lab, Managing Director- South Asia, Altaf Halde said that Android users need to be extremely cautious in how they download apps. He further added, "It is best not to trust third-party apps, and whatever apps users do download should be scanned locally with the Verify Apps utility. But beyond that, Android users should be running a mobile security suite on their devices, such as Kaspersky Internet Security for Android devices''