Phishing Campaign for Indian Banking Users

A phishing campaign impersonating customer support for major Indian banks collects detailed banking credentials via realistic pages and then delivers Android apps (e.g., "SBI Quick Support") that request SMS permissions, persist across reboots, monitor incoming SMS messages (including OTPs), and exfiltrate them to a hard-coded C2; the report provides package names, domains, MD5 hashes, and MITRE technique mappings and advises installing apps only from official stores and disabling unknown sources.