German and Czech Android users are getting served with a banking Trojan directly through text messages, warns malware researcher Bart Blaze.
The message claims that the user has missed the delivery of a package by the DHL delivery service (or by the Czech Post, or by Czech-based online shop Alza), and should download a mobile app to arrange a new delivery attempt:
A direct link to the app is helpfully provided, but the “DHL Express Mobile”, “Posta Online”, or “Alza” apps that get downloaded are actually the Marcher banking trojan.
Full Article