Widespread OTP-Stealing Campaign Targets Android Users

Zimperium zLabs uncovered a sophisticated Android malware campaign dubbed "SMS Stealer" that uses malicious apps, fake ads, and thousands of Telegram bots to trick victims into granting SMS access; once installed the malware connects to C2 servers to exfiltrate incoming texts (notably OTPs), enabling account takeovers, fraud, and escalation to ransomware across more than 113 countries and hundreds of targeted brands.