Tens of thousands of Android device users across eight countries have been under attack from the new SMSFactory malware
that unknowingly subscribes victims to premium services, BleepingComputer
Most of the over 165,000 Android users have been targeted by SMSFactory between May 2021 and May 2022 were reported in Russia, Brazil, Argentina, Turkey, and Ukraine, said Avast researchers, who noted that a variant of the malware also features contact list exfiltration capabilities.
The report also noted the stealthy operation of SMSFactory, which proceeds with background operation and command and control server connection after installation. Admin account inclusion capabilities have also been added in new variants of the malware, according to researchers.
Users looking to prevent being infected by the SMSFactory malware have been urged to perform app downloads from the Google Play store and other trusted sources, as well as lessen the apps they are using. Reading app reviews from other users has also been recommended.