An Android Trojan is now spreading through one of the world’s largest spam botnets.
The Trojan, called Stels, delivers through emails sent by the Cutwail spam botnet, said Brett Stone-Gross, a senior security researcher at Dell SecureWorks Counter Threat Unit.
The phishing emails lure users into clicking malicious links that appear to be an Adobe Flash Player update.
Stels is capable of stealing mobile users’ contact lists and sending or intercepting text messages. It can also uninstall applications, make phone calls, including those to premium numbers, and deploy additional malware.
Though Stels cannot “root” Android devices, it can operate on nearly all versions of the mobile operating system, Stone-Gross said.