Through this the attacker can, for example, change the destination number for forwarded SMS messages. In February 2011, a ZeuS version for Windows Mobile was detected and named Tro jan-Spy.WinCE.Zbot.a [17]. The Tro jan contained the same basic function- ality as ZITMO. Similar Tro jans also exist for Android [9] and RIM’s Black Berry [10]. There are other Android Tro jans that leverage access to SMS OTPs such as the MMarketPay.A [25] Tro jan. This Tro jan buys items from online stores and intercepts the SMS messages containing a verification code that is needed to complete the payment process. Additionally, further mobile malware, which steals authentication credentials, attacks mobile phone owners