Phishing Android Malware Targets Taxpayers in India

McAfee Mobile Research identifies Elibomi, an Android infostealer distributed via personalized SMS phishing that impersonates Indian Income Tax and IT certificate apps; the malware harvests SMS/MMS, account lists, emails, phone numbers and financial information, exposes stolen data on Internet-accessible C2 servers, includes multiple variants and a string-obfuscation technique, and is detected by McAfee Mobile Security as Android/Elibomi.