Android smartphone users in Russia have been hit by a Trojan that, once installed, starts spouting off SMS text messages to premium numbers, Kaspersky Labs revealed on Tuesday. The attack is sent through a fake codec — a media player application — that users are asked to download and install. Once it’s been installed, the Trojan begins sending SMS messages to premium rate numbers, racking up charges on the user’s account. The attack may be a proof of concept test by the malware authors because it appears to be limited to Russia.