Threat actors are taking advantage of Android’s WebAPK technology to trick unsuspecting users into installing malicious web apps on Android phones that are designed to capture sensitive personal information.
« The attack began with victims receiving SMS messages suggesting the need to update a mobile banking application, » researchers from CSIRT KNF said in an analysis released last week. « The