The developers of this SMS Trojan are obviously trying to ride on the tailcoats of the recent release of the latest version of Firefox for Android:
Three .APK files are currently known to be malicious: f7sleep45feed_installer.apk (183 KB), Firefox-install.apk (465 KB) and Mozilla_Firefox_Android_install.apk (388 KB), but the names and sizes can be changed at any given time.
The malware in question is a variant of the Boxer Trojan which, once installed, covertly sends SMS messages to several premium rate numbers, then loads google.com.
"One of our researchers believed that this is probably an effort to make users believe that they have installed a dud app, thus, allowing them to download and install the fake app again, which, in turn, allows Boxer to send the premium SMS message multiple times," shared GFI's Jovi Umawing.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.