MASSIVE SMS STEALER CAMPAIGN INFECTS ANDROID DEVICES IN 113 COUNTRIES

Summary from the TLDR InfoSec newsletter

Researchers are tracking a campaign that utilizes 2,600 Telegram bots to promote malicious Android APKs controlled by 13 C2 servers. The bots deliver the malware by either directing victims to fake download pages that mimic Google Play or by promising to deliver victims a pirated APK. The malware transmits captured SMS messages to a website that offers anonymization services by using these phone numbers to relay OTP codes.