CyberCertPrepMobile Security FundamentalsMobile Threats & MalwareEASYFree question
A mobile malware sample sends a premium-rate SMS to a number controlled by the attacker immediately after installation without user interaction. The victim receives an unexpected charge on their phone bill. What malware category and technical mechanism describes this attack?
- A.B. Premium SMS fraud malware using the SEND_SMS permission to silently send chargeable messages to premium-rate numbers
- B.A. Ransomware using SMS for command-and-control
- C.C. Toll fraud malware exploiting the CALL_PHONE permission to make premium calls
- D.D. Subscription scam malware using WAP billing triggered via a background WebView
Why A is correct
Premium SMS fraud malware uses the SEND_SMS permission to send text messages to premium-rate shortcodes (numbers where each SMS incurs a charge billed to the sender). The attacker controls the premium number and collects the revenue. This is distinct from toll fraud (which uses CALL_PHONE for premium calls) and WAP billing (which uses a background WebView HTTP request to subscribe the victim, not SMS). This is also distinct from ransomware which encrypts data.
Know someone studying for Mobile Security Fundamentals? Send them this one.