Third-party Android App Store to SMS Trojan

This report details an Android malware campaign distributed through a third‑party app store (“Smart Content Store”) where malicious APKs install invisible apps that request device administrator privileges, harvest device metadata and contacts, and send attacker‑controlled SMS messages (likely to premium or international numbers) causing potential financial harm; the writeup includes network indicators (e.g., app.in-spicy.com) and numerous sample MD5 hashes.