The program Name on the icon may be different, including MMS and MMS Center.
However, the program icon becomes hidden after the first run, which makes Trojan more elusive.
If the test does not show the program work in the emulator, it runs a background timer.
Hence, the timer ceaselessly opens the dialogs activation administrative access to the gear until it obtains administrator privileges.
After clicking on the Cancel button, a new window appears immediately.
The process continues until the receipt of administrative access.
The malware sends gadget information and intercepts SMS to C & C-server, where the criminals receive further commands.
The Trojan also sends data to the server about the presence of administrative rights.
Hence, the altered SMS Manager becomes your devices default SMS Manager.
Administrator rights also activate the Trojan remotely lock the infected equipment.
However, a closer examination of the window shows that the word Play is written in small letters.
Moreover, the Avast antivirus solutions company identified this Android Trojan as Banker-IR.
