NewswireTODAY - /newswire/ - Phoenix, AZ, United States, 2014/06/02 - Snapchat spam has been discovered promoting a malicious website distributing Android malware. Victims of this spam campaign may have expensive charges placed on their mobile phone bills without their knowledge.

In late May Armor for Android uncovered Snapchat spam promoting a website called GlassforSnap.com which has been observed distributing Android malware. GlassforSnap.com peddles expensive premium SMS subscription services and distributes MinimobSMS malware that is also capable of incurring expensive text messaging charges on victims’ phone bills. This isn’t the first time we have seen Snapchat spam, but it is the first time we have Snapchat spam used in connection with Android malware.

Users who received a Snapchat spam message were lead to believe that they had been selected for the Google Glass Explorer Program and would receive a free pair of Google Glasses. To claim their prize all “winners” needed to do was register at GlassforSnap.com. The reality of GlassforSnap.com is much more sinister. To hide it’s true intentions GlassforSnap.com redirects all non-mobile traffic to the real Google Glass webpage, however, mobile visitors land on a two step webpage that eventually requires them to complete a final “sponsor offer” to unlock the free Google Glasses.

The final offer from GlassforSnap.com varied depending on the network operator and origin country of the mobile device. Europe, Asia, and South America ware targeted with malicious premium SMS subscription or Android malware campaigns. Premium SMS services have long been the prodigal child of cybercriminals as they can be expensive and often recurrent income until the victim cancels the subscription. GlassforSnap.com was observed promoting premium SMS subscriptions that cost as much as $37.45 per week, no small change.

Users attempting to complete the “sponsor offer” in select locations are redirected to one of two websites distributing Android malware. One of the malicious websites automatically begins downloading an app called MoboGenie which is considered a Potentially Unwanted Program (PUP) which has numerous privacy and security concerns. The second form of malware is known as MinimobSMS and is capable of subscribing the user to premium SMS services that can charge up to $40.50USD per month, the exact amount charged by these premium SMS subscriptions also varies depending on the device’s location.

Security researcher James Green considered the development of Snapchat spam promoting Android malware and said “It’s interesting to see the development of spam on messaging services exclusive to the mobile platform. In the past 2 years we have really started to see a development in mobile cybercrime that strongly resembles PC cybercrime.”

Armor for Android (armorforandroid.com) suggests that users adjust their Snapchat privacy settings to prevent this type of Snapchat spam. Snapchat users should restrict their accounts so that only friends can send them Snapchat messages.

Agency / Source: Armor for Android, LLC

Availability: All Regions (Including Int'l)

Traffic Booster: [/] Quick NewswireToday Visibility Checker

Distribution / Indexing: [+]