SMS malware acts like Covid-19 vaccine registration app, targets users in India and spreads via text messages

A new SMS malware imitating Covid-19 vaccine registration app is targeting Android users in India. Security researchers claim it spreads through text messages and collects sensitive information from the user's device.

A new malware said to be targeting Android users in India impersonating the Covid-19 free vaccine registration app has been reported by security researchers. Like other malicious software, the new malware tricks users into tapping on a link and downloading the Covid-19 vaccination registration app that's reportedly fake. Dubbed SMS Worm, the new malware spreads via text messages and steals the contacts list from the victim's device. Malware researcher Lukas Stefanko first reported the SMS Worm on Twitter, where he claimed that the new Android malware is targeting Indian users. He also shared some screenshots of how the malware spreads via a text message. Once users download the fake free vaccine registration app via the link provided in the message, the app appears on the phone as the Vaccine Register app, requests access to the contacts list, and permission to send and view text messages. Cyble, an Australia-based risk intelligence firm, has further revealed how the SMS Worm malware operated. According to Cyble, the malware performs different activities on the victim's device, once downloaded, like enabling unauthorized access or restricting access to private accounts and services, using the device for unauthorized activities, exposing personal data from the user's mobile device and accounts, and unauthorized deletion of data from the mobile device or services.