Android Phishing Scam Using Malware-as-a-Service on the Rise in India

McAfee Mobile Research warns of an ongoing Android scam campaign in India (Android/SmsSpy) that has produced hundreds of malicious apps and phishing pages to trick victims into supplying personal and bank details and to exfiltrate SMS one-time passwords; the malware is distributed via social channels, sold as a Malware-as-a-Service by ELVIA INFOTECH, and includes published indicators of compromise (file hashes, phishing URLs, and C2 endpoints).