CyberCertPrepMobile Security FundamentalsMobile Threats & MalwareEASYFree question
A user receives an SMS claiming their package cannot be delivered and asking them to install a 'tracking app' from a link. What type of attack is this and what does the linked APK likely contain?
- A.This is a smishing attack distributing an Android SMS-stealer or banking trojan as a fake delivery tracking app; the APK likely requests RECEIVE_SMS and READ_CONTACTS permissions to steal OTP codes and propagate itself to the victim's contacts via further smishing
- B.This is a legitimate carrier notification; all delivery SMS contain app install requests
- C.This is a vishing attack; the SMS link leads to a voice call scam
- D.This is a sideloading demonstration; the APK contains legitimate tracking functionality
Why A is correct
This is the classic 'FluBot' / 'Cabassous' malware distribution pattern: fake parcel delivery SMS, fake DHL/FedEx/USPS tracking app, delivered as APK via direct download link. Once installed, it: steals SMS (OTPs), accesses contact list and sends smishing messages to all contacts (self-propagation), overlays banking apps, and in some variants, also steals cryptocurrency wallet seeds.
Know someone studying for Mobile Security Fundamentals? Send them this one.