Android is one of the fastest growing platforms in the world. In the second quarter of this year there were more than 300 million active Android devices. The increase is almost 900,000 of new devices per day and still rising. These days Android occupies more than 60% of the mobile devices market! By the way there is around 300,000 newborn children a day all around the world, and this number constantly decreases.

Hand in hand with this trend goes the rise of applications and viruses for this platform. In the past week we noticed one of them that was especially tricky. At first look, it's trying to act like a regular Google Play application, but that's just an illusion. It is a fake application which not only downloads other fraudulent application, but it is also able to send premium text messages without user's knowledge

After the installation it replaces the original Google Play from the menu and just waits for a first start from the user.

Immediately after the first start you are asked to update the program and there your troubles continue "Critical update, install new version, click the continue".

After this step follows another nasty download from this link shows up:

After the installation of second aplication, your phone turns into a money sucking machine. Without your knowledge it starts sending premium messages on paid numbers. Luckily we caught this threat and Avast! detects both samples as Android:OpFake-BV.

This file is easily accessible from more than thirty malware pages, which are made to resemble various markets and download pages! But no worries Avast! users are protected even if you accidentally visit these pages.

SHA:

8CA2E64E008BA4FC667809D4DD9FA2CE98F8AF248F1DE7B280636555EF09EF40

DCE5A75092996B4388644B1E56A0F07FCB05F4C069E14AE269075EC2A33DA3FF