Report on Smishing-Based Mobile Security Threats

This report from the Mobile Analysis Team analyzes widespread Android smishing campaigns observed in 2024 that use SMS and social-media-based lures to direct victims to phishing sites or malicious APKs. Attackers impersonate public institutions, family events, exchanges, and social contacts to trick victims into revealing credentials, installing monitoring/infostealer apps, or transferring funds; the report catalogs impersonation types, delivery techniques, phishing examples, and provides several MD5 indicators.