Android threats are getting more advanced and refined in terms of their ability to mask themselves and spoof the Android Market. Lookout, a smartphone security service for safeguarding mobile devices, has found a new Android Trojan, GG Tracker. This particular malware affects users within the United States via interaction with several premium SMS subscription services without permission. An in-app advertisement serves as the carrier of GG Tracker.

In a blog to educate and warn users, Lookout identifies the paradigm on which GGTracker works: “Once activated, GGTracker registers the victim for premium subscription services that would normally require the user to reply or enter a pin on a webpage. The Trojan does this by contacting another server in the background. Malicious behavior is primarily driven on the back-end server with the device used to intercept crucial confirmation data in order to charge users without their consent.

“For example, in one of the services a user must typically answer 10 questions, enter a device’s phone number and type a PIN code received via SMS in order to sign up for the premium service.  The back-end server component of GGTracker will do all of this in the background without the user’s knowledge, or even the ability for the victim to see what’s happening. Charges may be up to $9.99.”

Google has been suffering from Android malware infections, more severely since late last year. This dilemma has pulled down the market share of Android, with fears mounting, making consumers consider a seemingly more stable iPhone experience. What is more alarming is that this could be just the beginning of the assaults.

The increasing sophistication on its form, how it attacks, the scope of damage and availability of a cure, these malware occurrences create opportunities for mobile security businesses—to formulate the antidote or equip with preventive measures. This is where Lookout comes into the picture. The company recently launched Safe Browsing app for mobile devices and partnered with Sprint to provide its customers protection from malicious sites, phishing and drive-by downloads.