A Valentine’s Day mobile application, which promises to send an romantic MMS message to a loved one, actually hides a money-making scheme that sends expensive messages to a Russian premium rate SMS number.
Security experts have come across a downloadable file called love_mms.rar, which itself contains a Java Archive (.JAR) called jimm2010.jar.
It’s unlikely, of course, that anyone outside of the Russian-speaking world would be impacted by this malware, especially as its installation messages are impenetrable to most of us born in other countries:
Добро пожаловать! Вас приветствует мастер установки Jimm 2010! Нажмите “Да”, чтобы продолжить инсталяцию.
Установка Jimm Сейчас будет произведена установка приложения Jimm 2010 на Ваш мобильный телефон. Нажмите “Да” чтобы продолжить…
Read more in my article on the Naked Security website.
Found this article interesting? Follow Graham Cluley on Twitter or Mastodon to read more of the exclusive content we post.